Security and store access
Your store holds every customer’s name, address and order history. Here’s exactly how we reach it, what we keep, and how you take access back.
How we reach your store
- A private app you install. Each client gets its own SypherRing app, installed from a private link that works only on your store. Shopify shows you every permission it asks for before you approve it, and you can remove it any time under Settings, Apps in your Shopify admin. Remove it and the workflows lose access at once.
- A collaborator account you approve. For setup and fixes, we ask for a Shopify collaborator account. Shopify won’t let us ask without the 4-digit request code you give us, you approve what the account can do, and you can remove it under Settings, Users.
- No shared passwords. We never ask for your login, and we never use one of your staff seats.
What each workflow needs
| Workflow | What it reads or does | Why |
|---|---|---|
| Hazmat Box Check | Reads orders and products, and places holds on fulfillment orders | To add up the perfume in each box and stop a label before it’s bought |
| Order-Status Responder | Reads orders, fulfillments and tracking; reads your support inbox, saves draft replies and sends the ones you approve, or, once you choose after the first 30 days, sends tracking replies on its own | To match the sender to the order and answer with live tracking |
| Sell-Out Early Warning | Reads products, inventory and orders | To check stock against each scent’s reorder point |
Before you install anything, your Store-Access Safety Sheet lists the exact permissions with the reason for each, and how to remove our access in a minute.
What we keep, and what we don’t
- Credentials in a vault. Access tokens are stored encrypted, kept separate for every client, and never put in a workflow, a log or an email.
- Signed messages only. Every message from Shopify is checked for Shopify’s signature before it’s used. Forged, altered or repeated messages are rejected.
- Short memories. We don’t keep records of successful runs that include order details, and alerts never include customer details. Your Monday digest lists order numbers and what happened to each, not customers’ names or addresses. Failed runs are kept so we can fix what went wrong.
- Never sold. Your store data is never sold or rented. It’s used only to run your workflows and, with your OK, for the anonymized results we publish.
- No AI. Your workflows run on written rules, and your customers’ messages and orders aren’t sent to any AI model.
How it keeps running
- Hosted on our own server. Your workflows run on our own server, in n8n, the workflow tool we build on, not inside another app.
- Watched around the clock. Automated failure alerts reach us 24/7, and a person reviews your alert log every week.
- Backed up nightly. Every workflow is backed up every night, so a broken one can be restored.
- Two-factor everywhere. Every SypherRing account that touches your store, your carriers or your inbox uses two-factor login.
When you leave
Give 30 days’ notice and your workflows keep running through it. Then you remove the app and the collaborator account, and we delete your credentials and our copies of your data as your agreement says, after the free export kit or the handover to your own copy of n8n if you want one.
Who builds it
Every install is built and watched by a dedicated engineer certified in CompTIA Security+, CySA+ and PenTest+. Security questions go to security@sypherring.com.