Our Commitment
Simplify Studio is built with security in mind. We protect your account data, your store content, and any information you share with our AI so you can focus on building your Shopify store. This page summarizes our practices; we update it as we improve our systems and processes.
Authentication and Access Control
- Passwords: Account passwords are hashed using industry-standard hashing (e.g., bcrypt). We do not store or transmit your plain-text password.
- Sessions: We use secure, HTTP-only session cookies and tokens so that only your browser can authenticate you. Sessions can be invalidated on sign-out or after a period of inactivity.
- Least privilege: Access to production systems and customer data is restricted to personnel who need it to operate and support the service, and is reviewed regularly.
Data in Transit and at Rest
- Encryption in transit: All traffic between your browser or app and our servers uses TLS (HTTPS). We do not accept unencrypted connections for sensitive operations.
- Encryption at rest: Where applicable, we rely on encryption at rest for databases and storage that hold your data, using keys managed in a secure manner.
Shopify and Third-Party Integrations
When you connect your Shopify store, we use official Shopify APIs and only request the permissions needed to provide our AI store-building features. We do not store your Shopify credentials in plain text. We follow Shopify's security and data guidelines and recommend that you use strong passwords and enable two-factor authentication on your Shopify account where available.
AI and Data Handling
Data you provide to our AI (e.g., store copy, product information) is processed to generate and improve your store experience. We do not use your store content to train general-purpose models for unrelated products. Access to AI inputs and outputs is restricted and logged where appropriate. For more detail on how we use data, see our Privacy Policy.
Infrastructure and Operations
- We use reputable hosting and infrastructure providers that maintain strong security and compliance postures.
- We apply security updates and patches to our dependencies and systems in a timely manner.
- We monitor our systems for suspicious activity and respond to incidents according to internal procedures.
- We do not expose unnecessary ports or services to the public internet.
Vulnerability Management
We take reported vulnerabilities seriously. If you believe you have found a security issue in Simplify Studio, please report it to us responsibly (e.g., via a dedicated security contact or email listed on our website). We will acknowledge your report and work with you to understand and address the issue before any public disclosure. We do not pursue legal action against researchers who report in good faith and follow responsible disclosure practices.
What You Can Do
You play an important role in keeping your account and store secure:
- Use a strong, unique password for your Simplify Studio account and do not share it.
- Enable two-factor authentication on your Shopify account if available.
- Sign out when using shared or public devices.
- Review connected apps and permissions in your Shopify admin and revoke access you no longer need.
- Notify us promptly if you suspect unauthorized access to your account or data.
Updates
We may update this Security page from time to time to reflect changes in our practices or standards. The "Last updated" date will be revised when we do. For specific contractual commitments, please refer to our Terms of Service and Privacy Policy.
Contact
For security-related questions or to report a concern, contact us at the email or address provided on our website or in the app.