A database for every store
Your orders and customers live in a database of their own, never mixed with another store's.
Card details never reach us
Shoppers pay in the payment provider's own window. Every order is checked with the provider.
Two-step sign-in
Authenticator-app codes for every account. Staff powers need a code every session.
What protects your account
Strong password storage
Passwords are hashed with scrypt at the cost OWASP recommends. We never store them in plain text.
Sign out everywhere
Changing your password ends every other session at once.
Limits on guessing
Repeated wrong passwords are slowed down, per account and per address.
Roles for your team
Owner, admin, editor or viewer. Invitations are tied to one email and expire in seven days.
An audit log
Sign-ins, security changes and shop changes are recorded: who, what and when.
Custom code kept apart
Code you add runs in a sandbox with no access to other sites, and never on checkout.
You own it, and you can have it removed
- Closing a store takes it offline at once
- Its data is deleted for good 30 days later
- Ask us to delete your account and data at any time
- Designed around India's Digital Personal Data Protection Act and the GDPR
Security questions
Looking for something else?
Talk to a person on our team. We usually answer within a working day.
Every store has its own database, so your customers are never mixed with anyone else's. Card details never touch our servers. Two-step sign-in is available on every account.
You do. You can ask us to delete your store and its data at any time.
Your store could be live before your chai goes cold
Describe your business in one sentence. We'll do the rest.
Slow skincare
Shop