Security
The safest data is data the app never has. These are the practices built into the product today.
| Least access | The app reads products, stock and orders. Its only write permission adds a conversion tracking pixel, if you turn it on. It can't change products, prices or discounts. |
|---|---|
| No customer data | Customer names, emails, phone numbers and addresses aren't read or stored. Order data is limited to quantities, plus the total of orders reported as conversions. |
| Encrypted API keys | Your ChatGPT Ads and Conversions API keys are encrypted at rest with AES-256-GCM. They're never shown again, sent to your browser or written to a log. |
| Clean logs | API keys, tokens and personal details are removed before anything reaches logs or the audit log. |
| Store isolation | Every database query on shop data must name the shop, or the code refuses to run it. |
| One guarded write path | Every outside change goes through a single executor. Shadow mode records without sending, the pause switch blocks it, and one idempotency key produces at most one call. |
| Server-side checks | Limits are enforced on the server, before sending and again at approval. The browser can't skip them. |
| Trusted amounts | For purchases, the app reads the amount and items from Shopify itself, so they can't be forged from the browser. Prices in browsing events come from the synced catalog. |
| Short-lived events | Browsing events are kept for 30 days, then deleted. They're only collected for visitors who arrived from a ChatGPT ad. |
| Authentication | Access to the app requires Shopify authentication. |
| Deletion | After you uninstall and Shopify sends its deletion request, every record about your store is deleted. |
What we don't claim
AgenAds holds no third-party security certification, and it hasn't had an outside penetration test. If that changes, it'll be listed here.
Reporting a problem
A security contact will be published here before launch.
See what it would do before it does anything.
AgenAds isn't on the Shopify App Store yet. The demo runs the app's real discount, policy and copy checks, so you can test the logic today.