Security & Shopify Data Handling
A transparent architectural breakdown of how xFlow accesses, encrypts, and isolates Shopify store information. We build with strict least-privilege API scopes and sovereign vector databases.
Least-Privilege API Scopes
We never request full Shopify Admin access. Our custom apps request only the specific read scopes required for your agent (e.g. `read_orders` for WISMO tracking, `read_products` for sales recommendations). Payment credentials and customer passwords remain entirely inaccessible.
Zero Foundation Model Training
Your store policies, catalog specs, and customer conversations are never used to train public foundation models (OpenAI, Anthropic, or Gemini). All API calls operate under enterprise zero-data-retention agreements.
Isolated Vector Stores
Each merchant's ingested documentation and policy knowledge base reside in dedicated, isolated vector namespaces or private PostgreSQL instances with row-level security (RLS). No multi-tenant data cross-contamination.
End-to-End Encryption
All data in transit is encrypted using TLS 1.3. API tokens and access secrets are stored in dedicated hardware security modules or encrypted environment vaults (AES-256) with strict access auditing.
Compliance with the Indian DPDP Act & Global GDPR
xFlow's data processing architecture is engineered in alignment with India's Digital Personal Data Protection (DPDP) Act 2023 and the European Union's General Data Protection Regulation (GDPR).
• Data Minimization: The agent only extracts the minimal parameters necessary to complete a query (e.g. order tracking status) and discards sensitive payload data immediately after generating the response.
• Right to Erasure: All customer conversation logs and vectors associated with a user can be purged upon verified customer request via our administrative console.
• No Unsubstantiated Claims: We state transparently: xFlow is an independent engineering firm. We do not claim external ISO or SOC certifications we have not undergone. We adhere strictly to verified cryptographic and architectural industry best practices.
Standard Shopify Admin API Permissions Used
| Permission Scope | Access Level | Purpose & Operational Need |
|---|---|---|
| read_orders | Read Only | Retrieve line items, order totals, and fulfillment status for customer lookups. |
| read_products | Read Only | Index catalog descriptions, size charts, and real-time inventory counts for sales agents. |
| read_fulfillments | Read Only | Fetch carrier names (Delhivery/Shiprocket) and tracking numbers to resolve WISMO tickets. |
| write_orders | Optional / Scoped | Applied solely when you enable automated COD tagging (`COD_VERIFIED`) or customer address corrections. |
Have specific data security questions?
Book a security and architectural review with our engineering lead. We are glad to sign mutual Non-Disclosure Agreements (NDAs) prior to scoping.
Free 20-minute consultation • No sales pressure
