A plain account of how Shopdresser protects accounts and data. We only list what is really in place.
Your account
- Passwords are stored only as salted hashes. Nobody at Shopdresser can read your password.
- You can also log in with a link sent to your email, valid once and for 30 minutes.
- Too many login attempts or sign-ups from one address are blocked for a while.
Your data
- Every page and every connection to your dashboard uses HTTPS.
- Each business sees only its own data. Every action in a dashboard checks that the record it touches belongs to that business; this is covered by automated tests that run before each release.
- Your customers' contact details are used only to send your own messages. They are not sold, not shared, and not sent to the AI model.
- Servers are in France (European Union).
Payments
- Payments are handled by Stripe. Card numbers go directly to Stripe and never reach our servers.
- Payment notifications are accepted only with a valid signature and only when recent.
Public pages and forms
- Public forms are protected against automated submissions and limited per address.
- Page views are counted without cookies or identifiers.
- Nothing personal is printed into pages that may be stored by a cache.
Your control
- You can download everything stored for your business, and delete your account yourself, in your dashboard under Settings.
- Deleting is immediate in the live system; copies in backups are overwritten in the normal backup cycle.
If something goes wrong
If a security incident affects your data, we tell you without undue delay, as described in the Data processing agreement and the Privacy policy.
Found a weakness?
Please tell us at zyagency20@gmail.com before telling anyone else, with enough detail to reproduce it. We answer within a few working days and work with you to fix it. Please do not access other people's data or disturb the service while testing.