Security posture — pragmatic, transparent

PriceScout processes donation-floor photos through encrypted HTTPS connections. Scan imagery used for identification is handled ephemerally — we do not build unrelated advertising profiles off thrift volunteers doing their jobs.

Accounts (once authenticated flows ship in upcoming releases) isolate tenant data logically — mixer carts stay separated per operator configuration with salted passwords via modern hashing defaults outlined in deployment docs.

Stripe handles PCI-sensitive payment rails — card numbers never touch PriceScout servers. Webhooks verify Stripe signatures before subscription status updates persist anywhere internal.

Operators needing SOC-style questionnaires should email hello@pricescout.pro — responses arrive within a few business days with architecture specifics tied to your rollout phase.