Security Standards

1. Payment Security & PCI-DSS Compliance

Your financial security is our highest priority:

• Zero Card Data Storage: Mr. Breado does not store your credit/debit card numbers, CVVs, or bank net-banking passwords on our servers.
• Certified Gateways: All online card, UPI, and net-banking transactions are processed through certified, PCI-DSS Level 1 compliant partners.
• 256-Bit SSL/TLS Encryption: Every byte transferred between your browser and our servers is secured with TLS encryption.

2. Account & Authentication Security

We protect customer accounts through layered authentication:

• One-Time Passwords (OTPs) sent directly to your verified phone number.
• Cryptographically hashed password storage using bcrypt with industry-standard salt rounds.
• Secure JWT token expiration and session invalidation upon logout.

3. Tamper-Evident Food Delivery Packaging

Security extends from bits to bites:

• Every meal bag is sealed with a security seal sticker before leaving our kitchen counter.
• If the seal is broken or compromised upon delivery, please do not accept the package and notify us immediately for a free replacement.

4. Responsible Vulnerability Disclosure

If you are a security researcher and have discovered a potential security vulnerability in any Mr. Breado digital asset, please report it responsibly to security@mrbreado.com. We take all reports seriously and address confirmed issues expeditiously.