Security

Encryption

Your Shopify access tokens are encrypted with AES-256-GCM before they're stored, and the key is kept separately from the database. Our database provider encrypts all stored data at rest, and every connection between your browser, the dashboard, the storefront chat and our servers uses HTTPS.

Authentication

Logins use Supabase Auth. Passwords are never stored in plain text: they're hashed with bcrypt, a one-way algorithm built to resist guessing. New accounts confirm their email address, and password resets use a single-use link sent to that address.

Store isolation

Every store's data lives behind row-level security in the database: each request can only read and change rows belonging to the signed-in member's own store. We test this with automated checks that try to read and change another store's data and confirm it's refused. Background jobs filter every query by store as well.

You approve every money action

Ava can only propose refunds, cancellations and address changes. Nothing changes in Shopify until a member of your store approves it, and we record who approved each action and when. Settings that would let money move automatically don't exist, in the dashboard or in the database.

Verified connections

Every request that reaches AstaDesk from outside is checked before anything is done with it: Shopify webhooks and storefront chat requests by their HMAC signatures, payment events by PayPal's or Stripe's signature checks, forwarded emails by a secret token, and background jobs by signed requests. Repeated deliveries are recognised, so nothing runs twice.

Rate limits and loop protection

• Store chat: up to 10 messages per visitor every 10 minutes, and 60 new chats per store per hour.
• Email: auto-replies, mailing lists and automatic notifications are recognised and never answered, and a sender writing too often is paused.
• Ava sends at most a few automatic email replies in a row in one conversation before handing it to you (you choose the number).

Audit trail

AstaDesk keeps a record of the things that matter: who approved or rejected each action and the result in Shopify, every payment event, privacy requests from Shopify, and the emails that were skipped and why (visible in Settings).

Data handling

• Ava only sees what's needed for the question: the conversation, your policies and the relevant store data.
• Chat shoppers must give both their order number and checkout email before Ava discusses an order.
• Your data is never used to train AI models, and never sold.
• Shopify privacy requests are handled automatically: customer data is deleted on request, and a store's customer data is deleted 48 hours after it uninstalls AstaDesk. Stores connected with their own private app send us these requests by email. Details are in our Privacy Policy.

Third-party services we use

• Supabase: Postgres database and logins, data encrypted at rest
• Vercel: hosting, served over HTTPS
• Anthropic: the AI model behind Ava; it doesn't train on API data
• Inngest: background jobs, called only with signed requests
• Postmark: receiving forwarded emails and sending replies
• PayPal and Stripe: payments; card details never reach AstaDesk
• Shopify: store data, through the official Admin API (with the store's own app credentials, encrypted like tokens)

Reporting a concern

If you think you've found a security problem, please email info@websaura.com with the details. We read every report, reply as soon as we can, and ask that you give us a reasonable chance to fix it before sharing it publicly.