Owner, Administrator, Catalogue, Order/Warehouse, Accounting/Report and Support roles come pre-configured. Changing prices, bulk deletion, returns and cancellations, data export, changing payment keys, domain and DNS are 22 separate permissions. Grant each person only the permission required for their job; you can change roles at any time from the roles screen.
Is card information stored in the store?
No. Card details are entered in the embedded form on the payment provider’s store page and do not touch the store server. Orders are confirmed only by the signed notification from the payment provider; a result returned from the browser alone does not confirm the order. Your payment provider connection details are stored encrypted, and changing payment keys requires separate permission; you grant this authority only to those who need it.
6 ready roles, 22 distinct permissions
Owner, Administrator, Catalogue, Order/Warehouse, Accounting/Report and Support roles come pre-configured. Changing prices, bulk deletion, returns and cancellations, data export, changing payment keys, domain and DNS are separate permissions.
Audit log
Actions such as price, stock, domain, theme, export, role and support entry are written only to an added record; they are not deleted or modified. Actions performed by the support team are additionally marked and shown to you. Password and key values are not written to the record.
Card data does not stay with you
Card details are entered in the payment provider's embedded form; they do not touch the store server. Orders are confirmed only by the payment provider's signed notification.
Customer data
Each store's data is in its own separate database
When a customer selects 'Delete my account', personal fields are anonymised; order records remain masked for the legal retention period
Customer names are shortened in reviews
Measurement pixels do not work without cookie consent
Login form attempt limit and lockout
Secure content
Product descriptions, page and blog content are stored after sanitisation; employees with content authority cannot run scripts in the customer's browser. Uploaded image types are checked against their content. The dashboard session is held in a secure cookie that scripts on the page cannot read.