Security

Guarded by default.

Security isn’t a feature we bolted on — it’s how ShopSifu is built. Merchant and shopper data is isolated, encrypted, and access-controlled from the ground up.

Per-tenant isolation

Every merchant’s data lives in its own isolated Postgres schema. One store can never reach another’s conversations, configuration, or knowledge base.

Encrypted everywhere

Shopify OAuth tokens are encrypted at rest with AES-256. All traffic is served over HTTPS (TLS 1.2/1.3), and data in transit between our services is encrypted.

Least-privilege access

Access to production systems is restricted to a limited number of authorized personnel, and sensitive tenant lifecycle events are recorded in an audit log.

Private by default

Conversation content is surfaced to our team only through a linked support ticket — never browsed at will. Your shoppers’ chats aren’t an open book.

Your data isn’t training data

We never sell your data, and we never use your conversations or catalog to train third-party models. It’s yours, used only to serve your store.

Authenticated requests

Chat widget requests are authenticated with a per-merchant publishable key and validated against your store’s origin before anything is answered.

What we never do

Sell or share your data with anyone
Train third-party models on your conversations or catalog
Let our team read conversations outside of a linked support ticket
Store raw payment-card data — payments never touch Sifu

How your data is handled

Trusted sub-processors

We rely on a small set of vetted providers to run ShopSifu. Each handles only what its role requires.

Azure OpenAI
AI responses & embeddings
Cloudflare R2
File & attachment storage
Clerk
Authentication
Stripe
Billing
Meta / WhatsApp
Messaging channels
Resend
Transactional email

Deletion on request. We honor Shopify’s data-erasure webhooks — when a shop or a customer requests redaction, the relevant data is deleted. Because each merchant lives in its own schema, removing a store removes its data wholesale.

Responsible disclosure

Found a vulnerability? We investigate every report and work with you to resolve confirmed issues promptly. Reach the security team directly — please don’t disclose publicly until we’ve had a chance to fix it.

[email protected]