Trust
Security and trust
How Inscend protects your store's data and the logins it holds, and what it does before anything leaves your account. Each sentence here describes what Inscend does today, not what is planned.
Your logins and connections
When you connect Shopify, the key Shopify gives Inscend for your store is stored encrypted, with an encryption key kept in the server's secret settings, never in the code.
If that encryption key is missing or wrong, Inscend stops rather than storing or using your Shopify key unprotected.
The keys for the other tools you connect are held by Nango, the connection service Inscend uses, not in Inscend's own database. Disconnecting a tool stops Inscend reading it, then deletes its key at Nango.
Passwords are stored only as a one-way hash, and the one-time codes Inscend emails you are stored hashed too.
Nothing goes out without your approval
Nothing is sent, ordered or changed in your store without your approval.
An approval covers exactly what you reviewed: the content, who it goes to and, for a supplier email or a Printify order, the address or shop it goes to. Just before acting, Inscend checks the work still matches; if it changed, the approval no longer stands and the work comes back to you.
Your business stays yours
Which business you see and change is worked out on Inscend's server from your signed-in account, never from what your browser sends.
Each person's role is checked on the server on every request: a Viewer can read but not change anything, and sending from your own tools stays with the owner, apart from a Manager's Approve and send on a Recovery email.
What Inscend writes from
When Inscend writes a win-back email, it works from your business name and type, how you said your business sounds, the reason for writing, the products and offer you chose, and two figures that hold for everyone it goes to: how many people, and the shortest time any of them has been away. It isn't given the list of who the email goes to, or what anyone spent.
Our Privacy Policy says Inscend does not use your data to train public AI models or share it with other businesses.
Deleting your data
You can ask for your data to be deleted at any time; the Data deletion page says how, what is deleted and what is kept.
Shopify's privacy requests
With Shopify connected, Inscend answers Shopify's three privacy requests: for a customer's data, it emails you, the store owner, what it holds about them; for a customer's erasure, it removes that customer's personal details from your store's records; and after you uninstall, for the store's erasure, it erases what came from that store. A request without Shopify's valid signature is refused.
Report a security problem
To report a security problem, email info@inscend.io with "Security" in the subject, saying what you found and how to see it. This inbox is monitored by the Inscend team.
Never send passwords, one-time codes, store access keys or other secrets by email, and don't open anyone else's data to show a problem.