Can Avantages change my Shopify store?
No. Avantages only has read access to your store data. It cannot edit orders, products, customers or settings.
Security
How we protect your store data
Your orders and customers are some of the most sensitive data your business has. This page explains, in plain language, how Avantages keeps that data safe. It describes what is in place today, not plans.
Store access
Read-only access to your store
You connect Shopify with Shopify’s own secure sign-in. Avantages only asks for read access: orders, customers, products, discounts, inventory, shipping and reports. It cannot change your store, your orders or your products.
Google Analytics 4 is connected with read-only access to your reports in the same way.
Encryption
Encrypted in transit and at rest
- Every connection to Avantages uses HTTPS with TLS encryption.
- Connections to our databases must use TLS, and our services verify the database certificate before they connect.
- Our databases, servers and file storage are encrypted at rest on Amazon Web Services.
Separation
Each store’s data is kept apart
Every row of store data carries the store it belongs to. The database itself enforces row-level security, so a query made for one store can only read that store’s rows, even if a mistake were made in our application code.
| What | Where | Details |
|---|---|---|
| Databases and data pipeline | Amazon Web Services, United States (us-east-1) | Encrypted at rest, daily backups kept for 7 days |
| The Avantages app and this website | Vercel, United States | Served over HTTPS only |
| Sign-in | WorkOS | Passwords are handled by WorkOS, not stored by Avantages |
| AI answers and reports | OpenAI | Receives your question and the chart data needed to answer it |
Access
Private servers and limited access
- Production servers accept no public SSH connections. Administrators connect through AWS Systems Manager instead.
- The analytics database is on a private network and cannot be reached from the internet.
- Access to production systems is limited to the team members who need it.
- Application logs leave out database query values and are kept for 14 days.
AI
How AI features use your data
When you ask a question or request a report, Avantages sends OpenAI your question together with the chart data and metrics needed to answer it. Under OpenAI’s API terms, that data is not used to train OpenAI’s models by default, and we do not use your store data to train AI models either.
Before a report or briefing reaches you, each number in it is checked against your store data.
Privacy requests
Shopper and store deletion requests
Avantages handles Shopify’s privacy webhooks. Each request is verified with Shopify’s signature before it is processed. When a shopper asks your store to delete their data, we remove that shopper’s personal details from our copy of your data within 30 days. When you uninstall the app, we delete your store’s data and access credentials.
Report a problem
Found a security issue?
If you believe you have found a security vulnerability in Avantages, please email [email protected] with the details and the steps to reproduce it. A founder reads every report, and we will reply to you. Please give us reasonable time to fix the issue before you share it publicly.
Questions
Security questions
Where is my data stored?
On Amazon Web Services in the United States (us-east-1), in encrypted databases. The app itself runs on Vercel.
Can other brands see my data?
No. The database enforces row-level security, so each store can only ever read its own data.
Is my data used to train AI?
No. We do not train AI models on your store data, and under OpenAI’s API terms the data sent to answer your questions is not used to train their models by default.
Founding member offer for the first 20 brands
Get 3 months free as a founding member
Then 50% off your first year. In a 30-minute call, we connect your Shopify store and walk you through your first daily briefing.
Claim a founding spot →
A 30-minute call, no commitment