AfterRevenue uses layered controls to protect Shopify merchant and customer data throughout the post-purchase recovery workflow.
Data minimization and isolation
AfterRevenue requests only the Shopify scopes and protected fields needed for documented recovery functions. Shop data is isolated by authenticated Shopify shop context. Production customer data is not copied into local development or automated tests; those environments use synthetic fixtures and separate credentials.
Encryption and backups
Public app traffic uses HTTPS. The production PostgreSQL provider requires encrypted connections and encrypts customer data and backups at rest. Application credentials and integration secrets are stored as managed environment secrets rather than source code.
Access and loss prevention
Access is limited to authorized operators who need it to operate or support AfterRevenue. Staff accounts must use unique strong passwords of at least 14 characters and multi-factor authentication where supported; shared passwords are prohibited. Shopify session authentication, least-privilege scopes, guarded Admin API operations, bounded logs, output sanitizers, and privacy webhooks reduce disclosure risk.
Retention and privacy requests
Automated retention controls delete expired recovery links after 30 days and delete recovery events and related operational audit records after 12 months. Completed privacy export payloads are scrubbed after 30 days. Valid Shopify customer-redaction and shop-redaction webhooks remove scoped identifiers or shop-owned data.
Monitoring and incident response
Application and infrastructure activity is logged for security review without intentionally logging passwords or access tokens. Suspected incidents are triaged, contained, investigated with preserved evidence, and remediated. We notify affected parties when required, then document corrective actions.
Report a security issue
Email singhanhad78@gmail.com with the subject “AfterRevenue security”. Do not include passwords, access tokens, payment details, or unnecessary customer data.