Authenticated through Shopify
Admin access uses Shopify authentication and signed session tokens. Buyer access resolves the signed customer identity and authorized B2B company/location context. Invoice PDFs are protected by authorization checks; a file identifier alone does not grant permission.
Verified inputs and encrypted credentials
Shopify webhooks are authenticated before processing. Persisted Shopify access tokens are encrypted at rest. Input validation, rate controls, store-scoped access and reconciliation support operational workflows.
Privacy request workflows
NetGuard implements Shopify customer-data request, customer-redaction and shop-redaction workflows. Uninstall deactivates the app and removes sessions; covered app data and PDFs are removed when shop redaction is processed, subject to reinstall safeguards.
Service providers
Shopify supplies commerce, identity and billing. Cloudflare supplies hosting, storage, database, sessions/cache and PDF rendering. Resend delivers invoice/reminder messages. Our email service processes correspondence sent to our support address. See the privacy and data processing pages for details.
Service commitments
NetGuard does not claim SOC 2 or ISO 27001 certification, a contractual uptime SLA, dedicated regional hosting or guaranteed credit recovery. Shopify integration is not a claim of Built for Shopify certification. Contact us for a security questionnaire or signed agreement requirement.
Report a vulnerability
Email support@codekaarigari.com with a description, affected page, timing and safe reproduction steps. Do not include credentials or unnecessary personal data. Do not access another merchant’s records or disrupt production to demonstrate a finding.
Review Shopify staff access, company-contact location assignments, enabled checkout rules, bank instructions and downloaded exports. App safeguards work alongside the permissions and policies you maintain.