Security

Data minimisation

• We read only what a label needs: the customer’s name, shipping address and phone number. We never request customer email addresses or payment details.
• Order notifications from Shopify are trimmed to the fields the app uses before they reach us.

Encryption

• Customer details, shipping labels, India Post credentials and Shopify access tokens are encrypted at rest with AES-256-GCM.
• All traffic uses TLS: between your browser and the app, and between the app and Shopify or India Post.
• Database backups are encrypted, and every nightly backup is automatically test-restored.

Isolation between stores

Every record belongs to one store, and every query is scoped to the store signed in through Shopify. Automated tests check that one store can never read or change another store’s data.

Access control and logging

• Merchants reach the app only through Shopify-authenticated sessions, and see only their own store.
• Server access is limited to named administrators, and every staff account requires two-factor authentication.
• Every time customer details are opened, printed or exported, we record who did it and why, without recording the details themselves. These records are kept for a year.
• Application logs never contain customer details or secrets.

Retention

Customer details are erased automatically after each shipment ends (and from shipments that never finish, after a longer limit), labels shortly after India Post scans the parcel, and all of a store’s data after it uninstalls. The periods are in our privacy policy.

Infrastructure

• The app runs on dedicated service accounts on its own server in Mumbai, India (Amazon Web Services), with per-visitor rate limits; encrypted backups are copied offsite to the European Union. The database accepts connections only from the app’s own server.
• The app contacts only Shopify, India Post, our email provider for staff notification emails and, for stores that connect it, their own Unicommerce account. Store settings can’t redirect it anywhere else.
• Test and production are fully separate: different Shopify apps, databases and encryption keys. Production data is never copied to test.

Incident response

We follow a written incident response process: contain, investigate, recover, and notify affected merchants without undue delay, and authorities where the law requires, including CERT-In in India.

Reporting a vulnerability

If you find a security issue, email support@myenrixa.com with the details. Please don’t access other stores’ data or disrupt the service while testing. We’ll acknowledge your report and keep you updated while we fix it.