Resources
Security.
How we protect your store and your customers.
Shopify OAuth with scoped access
Store connection uses Shopify OAuth with permissions limited to what the integration needs.
Server-side credential handling
Integration tokens and provider secrets stay on the server—not in the browser.
Encrypted transport
Merchant app traffic is served over HTTPS in production.
Session security and password hashing
Merchant sessions use HTTP-only cookies; passwords are hashed with scrypt.
Access controls per merchant account
Every request is checked against your account and workspace.
Focused call context
Live calls assemble shopper and campaign context for that conversation—not bulk store exports.
Responsible disclosure
Report security concerns through our contact form—we route them to the right team.