SECURITY & DATA
Your data stays yours, and here is how.
What Aplon can touch, how your data is kept and for how long, how you sign in, and who else is involved.
TRUST & SECURITY
Peace of mind, always.
Your data remains your own.
It reads your store and changes nothing but its own pixel. Your data is encrypted and never sold.
Official Shopify OAuth
It reads your store and writes one thing: its own tracking pixel. No product, order or theme edits.
Read-only · except its own pixel
GDPR-ready, with a DPA
A data processing agreement comes with every account, with nothing to sign.
DPA · aplon.io/dpa
Encrypted at rest
Store and ad account logins, shopper emails and bank details are encrypted before they’re saved, on top of the database’s own encryption.
AES-256-GCM · every login and key
WHAT APLON CAN TOUCH
It reads your store. It changes only what you ask.
- Shopify: read, plus its own pixelAplon asks Shopify for permission to read, and to add one thing: its own tracking pixel. It cannot edit your products, orders, customers or theme.
- Ad accounts: only when you clickIn Meta and Google it pauses ads, changes budgets or publishes a campaign only when you click to, and new campaigns arrive paused.
- Klaviyo: only what you switch onIt hands abandoned carts to your Klaviyo account, and only once you turn that on.
- Take it back whenever you likeDisconnect in Settings and the stored login is deleted there and then. You can also remove access from Shopify, Meta, Google or Klaviyo directly.
HOW IT IS KEPT
Encrypted, and kept only as long as it is needed.
- Encrypted before it is savedStore and ad account logins, shopper emails, bank details and storefront passwords are encrypted with AES-256-GCM, on top of the database’s own encryption.
- Encrypted on the wayEvery connection to and from Aplon uses TLS 1.2 or higher.
- Kept for a set time, then deletedOrders for five years and pixel data for two, deleted automatically every day. Logins go the moment you disconnect. Server logs last 90 days.
- Never sold, never trained onWe do not sell your personal data to third parties. We do not use your store data, ad account data, or Aplo chat history to train AI models.
SIGNING IN
Your account, locked properly.
- Passwords stored as salted hashesAplon never keeps your password itself, only a salted hash of it.
- Two-factor codesAdd a code from an authenticator app to every sign-in.
- Sign out any deviceSessions end after 30 days, and you can sign out any single device from your account.
- Guesses are limitedToo many sign-in or code attempts in a row are blocked for a while.
WHO ELSE IS INVOLVED
Named, bound, and answerable.
- Named in the Privacy PolicyThe companies that help run Aplon, for hosting, payments, email, error reports, and Anthropic for Aplo, are listed by name.
- A DPA with every accountA data processing agreement comes with every account, with nothing to sign.
- If something goes wrongIf a breach puts your data at risk we tell the regulator within 72 hours, and where the risk to you is high, we tell you directly too.