Security

Shipping data is customer data. This is how we handle it.

Access to your stores

• We never ask for marketplace passwords. Stores connect through official authorization flows: Etsy OAuth 2.0 with PKCE, Shopify app installation, and Amazon Login with Amazon.
• We request the narrowest permissions that do the job (for example, read-only order access for importing orders).
• You can revoke Sendora’s access from your marketplace at any time; we then delete that store’s data within 30 days.

Protecting data

• In transit: all traffic uses HTTPS/TLS.
• At rest: any stored personal data is encrypted, including backups.
• Minimal storage: today, order data is fetched from your store when you open Sendora and is not kept in a Sendora database. When order storage is introduced, buyer personal data will be deleted no later than 30 days after delivery.
• Secrets: API keys and tokens live only in server-side, encrypted secret stores — never in browser code or source control.
• No AI training: marketplace and buyer data is never used to train AI models.

Who can access it

• Access to production systems is limited to authorized personnel, with multi-factor authentication on every administrative account.
• Support tools are read-only: they can look up an order to help you but cannot move money, buy postage or change shipments.

If something goes wrong

We investigate any suspected security incident immediately, contain it, and notify affected sellers and the marketplaces concerned without undue delay and within the timelines their policies require (for Amazon, within 24 hours of detection), as well as Japan’s Personal Information Protection Commission where APPI requires.

Reporting a vulnerability

Please email galarcon@metastudios.jp with the details. We acknowledge reports within 3 business days and will not take action against good-faith research that avoids privacy violations and service disruption.

Last updated: October 22, 2026.