Your store credentials are never stored. We use industry-standard security practices and official API channels — always.
We use Etsy's and Shopify's official OAuth 2.0 flows. You authorize us directly on their platforms — we receive scoped access tokens, never your password.
All data in transit is encrypted using TLS. API tokens are stored encrypted at rest, never in plain text.
We request only the API scopes essential to our core functionality. No payment data, no buyer personal information beyond shipping addresses.
Order and inventory data is retained only as long as your account is active. On account deletion, all data is permanently purged within 30 days.