AI for Shops

Security

Learn about our security practices and how we protect your data

Our Commitment to Security

At AI4Shops, security is a top priority. We implement industry-standard security measures to protect your data and ensure the safety of your business information.

Data Protection

Encryption

  • All data transmitted between your browser and our servers is encrypted using TLS 1.3
  • Sensitive data is encrypted at rest using AES-256 encryption
  • API keys and tokens are stored using secure hashing algorithms

Infrastructure Security

  • Our application is hosted on Vercel, a enterprise-grade hosting platform
  • Database is hosted on Neon PostgreSQL with automatic backups and encryption
  • All infrastructure components are regularly updated and patched

Authentication & Access Control

Account Security

  • Secure authentication via OAuth (Google, GitHub) or email/password
  • Session tokens are securely managed and automatically expire
  • Support for password complexity requirements

Role-Based Access

  • Admin and user roles with appropriate permission levels
  • Access to sensitive operations is restricted and logged
  • API access requires authenticated tokens

GDPR Compliance

As a European company, we are fully committed to GDPR compliance:

  • Data Minimization: We only collect data necessary for our services
  • Right to Access: You can request all data we hold about you
  • Right to Erasure: You can request deletion of your personal data
  • Data Portability: Export your data in standard formats
  • Consent Management: Clear opt-in for all marketing communications

Data Handling

What We Collect

  • Account information (email, name)
  • Form submissions from your websites
  • Usage analytics for service improvement
  • Payment information (processed securely via Stripe)

What We Don't Do

  • We never sell your data to third parties
  • We don't use tracking cookies for advertising
  • We don't share your customer data with other users

Security Monitoring

  • Continuous monitoring for suspicious activity
  • Automated alerts for potential security incidents
  • Regular security audits and vulnerability assessments

Incident Response

In the unlikely event of a security incident:

  1. We will investigate immediately
  2. Affected users will be notified within 72 hours
  3. We will take corrective action to prevent recurrence
  4. A post-incident report will be provided if requested

Third-Party Services

We use trusted third-party services that meet our security standards:

  • Stripe for payment processing (PCI DSS compliant)
  • Resend for email delivery
  • Vercel for hosting and deployment
  • Neon for database hosting

Reporting Security Issues

If you discover a security vulnerability, please report it responsibly:

Questions?

For security-related questions, contact our team:

We take every security concern seriously and will respond promptly.