Security at SmartSeller
You're trusting us with the numbers that run your business. Here's how we protect them.
Last updated: October 13, 2026
On this page
1. Built on Shopify's security model#
SmartSeller is an embedded Shopify app. You install it with Shopify OAuth and approve the exact permissions it asks for. Inside your admin, we authenticate every request with Shopify session tokens. Every webhook from Shopify is verified with its HMAC signature, and invalid requests are rejected.
2. Only the access we need#
We request only the Shopify permissions SmartSeller's features use, and you see the full list on Shopify's install screen before you approve. We minimise the customer data we handle: we use Shopify customer and order IDs to understand repeat purchases, and the city and state or region of each order to show where your profit comes from. We never store your customers' names, email addresses, phone numbers or street addresses.
3. Encryption#
Data is encrypted in transit with TLS 1.2+ and at rest with AES-256, including backups. Shopify access tokens and connector credentials are stored encrypted, separately from application data.
4. Infrastructure#
SmartSeller runs on Render in the United States, whose infrastructure is certified to industry standards such as SOC 2. Production and test environments are separate, and test environments never use real merchant data.
5. Access control#
Only a small number of team members can access production systems, through individual accounts with strong passwords and multi-factor authentication. Access follows least privilege, is reviewed regularly and is logged. We access a merchant's data only to provide support they asked for, or to keep the service secure.
6. Changes to your store#
SmartSeller never changes your store on its own. Every write (prices, costs, discounts, tags, collections, segments) is triggered by a person who confirms it, is recorded, and can be undone where possible.
7. AI and your data#
AI features send only the minimum data needed to xAI (Grok), under terms that forbid using it to train models. Your store data is never used to train AI models.
8. Monitoring, backups and continuity#
We monitor the service for errors, unusual activity and failed jobs, with alerting. Databases are backed up automatically, backups are encrypted, and we test restores regularly.
9. Incident response#
We keep a written incident response plan that sets severity levels, roles, escalation and evidence handling. If an incident affects your data, we'll notify you without undue delay, tell you what happened and what we're doing, and meet our legal notification duties.
10. Data deletion#
When you uninstall, we stop accessing your store immediately. Your store data is deleted within 30 days of Shopify's deletion request (sent 48 hours after uninstall). Your customers' deletion requests sent through Shopify are completed within 30 days.
11. Secure development#
Code is reviewed before release, dependencies are scanned for known vulnerabilities, and secrets never live in source code.
12. Report a vulnerability#
If you think you've found a security issue, email security@gosmartseller.com with the details and steps to reproduce. Please give us reasonable time to fix it before disclosing it, don't access or change other merchants' data, and don't run tests that degrade the service. We'll acknowledge your report within 3 business days and keep you updated. We don't take legal action against good-faith research that follows these rules.