Security & Data Protection

1. Scope

This policy covers the Shopify apps published by HappifyApps, operated by Udaan Technologies, including RepeatIQ and Stock Rescue. It explains the controls behind the commitments in our Privacy Policy.

2. Data minimisation

• Each app requests only the Shopify access scopes its features need, and each import query names the exact fields it reads.
• Stock Rescue never reads customer records. RepeatIQ reads customer ID, name, email, and order history only.
• Protected customer fields are never written to logs, error reports, or analytics.

3. Encryption

• All traffic between Shopify, our apps, and our database uses TLS 1.2 or higher.
• Data at rest is encrypted on managed, encrypted volumes at our database provider.
• Shopify access tokens are additionally encrypted with AES-256-GCM using a key held only in the hosting environment, never in source control.
• Database backups are encrypted with the same at-rest protections as the primary database.

4. Access control

• Production databases and hosting accounts are reachable only by named Udaan Technologies administrators.
• All administrator accounts require multi-factor authentication and unique, manager-generated passwords of at least 16 characters.
• Access is reviewed when staff join or leave and at least every six months.
• Application access to personal data is logged: installs, imports, segment pushes, tag writes, and redaction requests each write an audit record with the acting shop and time.

5. Environments and backups

• Development and testing run against local databases and Shopify development stores. Only installed merchant stores write to the production database, and development-store rows are removed before launch.
• The production database is backed up nightly as an encrypted dump. Restores are tested monthly into a disposable database.
• Deletion of personal data happens only through Shopify redaction webhooks, uninstall processing, or a verified merchant request.

6. Retention

• Order history is retained only for the analysis window each app needs, at most 24 months.
• All data for a store is deleted within 30 days of uninstall.
• Customer redaction requests are completed within 30 days; in practice they run automatically within minutes.

7. Security incident response

If we suspect unauthorised access to merchant or customer data, we follow these steps:

• Contain: revoke or rotate the affected credentials and, if needed, take the affected app offline.
• Assess: identify which stores, fields, and time range were affected, using the audit log and hosting provider logs.
• Notify: inform affected merchants by email within 72 hours of confirming an incident, with what happened, what data was involved, and what we did. We also notify Shopify through the Partner Dashboard where required.
• Remediate: fix the root cause, re-issue credentials, and record the incident and follow-up actions.
• Report a concern to security@happifyapps.com. We acknowledge reports within two business days.

8. Sub-processors

• Supabase: database hosting, Singapore region.
• Vercel: application hosting and scheduled jobs.
• Klaviyo: only for RepeatIQ, and only when the merchant connects their own Klaviyo account.

9. Contact

Security questions: security@happifyapps.com. Privacy requests: privacy@happifyapps.com. See also our Privacy Policy and Terms of Service.