Security

Last reviewed: October 18, 2026

WhatsApp Restock Alert uses layered controls to protect merchant and shopper data.

Data protection

In the Shopify-storage version, shopper requests, delivery jobs and privacy responses are held in private metaobjects in the merchant's Shopify account. Customer-model operations have no fallback to Pingmerce D1. Workers still processes this data in memory. The Privacy Policy explains legacy records that remain pending verified migration and deletion.

• AES-256-GCM application-level encryption for shopper phone numbers, privacy-response files, and provider credentials.
• Separated encryption and blind-index keys stored outside source control.
• HTTPS for the public service and enforced TLS for production database connections.
• Encrypted production storage and backups, with limited backup retention and restore testing.

Access and monitoring

• Shopify authentication and strict shop-level data isolation.
• An access policy requiring named accounts, least privilege, MFA and quarterly reviews.
• Audit records for personal-data views, exports, deletion, delivery processing, and privacy downloads.
• Redaction of phone numbers and credentials from provider errors and operational logs.

Data lifecycle and resilience

• Maximum retention periods enforced by an authenticated scheduled job.
• Separate production and test stores, databases, credentials, and keys.
• Mandatory Shopify data-access, customer-redaction, and shop-redaction workflows.
• Documented data-loss prevention, backup recovery, and incident-response procedures.

Report a vulnerability

Email ghasankececi@gmail.com with a description, affected URL, reproduction steps, and potential impact. Do not include real customer data or exploit the issue beyond what is necessary to demonstrate it.

We do not currently claim a third-party security certification.