AESTARWho can see a shop
Only the signed-in owner for that shop. A model, webhook, or CRM file cannot pick another shop. Browser visitors never receive the database service credential.
Trust
Your shop data stays yours.
Signed-in work is tied to your shop, not a link someone typed. This site does not load third-party ads, fonts, or chat widgets.
What we do not load
No third-party marketing pixels, off-site fonts, or outside chat widgets. Shop chat is first-party and stores an inquiry on this site.
Signed-in sessions
Shop sessions use signed, HttpOnly cookies. If required secrets are missing, sign-in fails closed instead of guessing.
What this page is not
This is not a SOC 2 report and not a pentest certificate. When those exist, they will be linked here instead of implied.