Security

Each store is its own channel with its own token. Catalogue, orders and customers are scoped to that channel at the query level, not hidden in the interface — so one merchant cannot read another’s data even deliberately.

Customer accounts are isolated too: a shopper’s e-mail is bound to the store it registered in, so the same person can hold an account in two stores without either knowing about the other.

Passwords are stored hashed and never kept in readable form anywhere. We cannot tell you your password, because we do not know it.

Staff accounts take scoped permissions: a cashier never sees an invoice, whoever runs the catalogue does not touch orders. And when a store is suspended, its dashboard sessions are revoked immediately.

The public forms — signup, sign-in, contact — are rate limited per network address and protected by a bot check.

We do not hold your customers’ money and we do not pass it through. Cash reaches you or your courier, and wallet transfers go straight from the customer to you.

We store no card numbers. Card payments are not available on the platform at all.

Traffic is encrypted in transit. The database is backed up with point-in-time recovery, not just a nightly copy.

Every sensitive action the platform takes on your store is written to an audit log: who did what, and when.

Access to production data is limited to the people who need it to run the service.

Write to us from the contact page with “security” in the subject. Tell us what you found and how to reproduce it. We will not pursue anyone who reports in good faith, does not exploit the issue and does not access anyone else’s data.

No system is completely secure. If a breach affects your data, we will tell you.