Security and incidents

Last updated 25 October 2026

How data is protected

All traffic is encrypted with HTTPS.
Data and its daily backups are stored encrypted in the EU (Render, Frankfurt). Backups are kept at least seven days.
Shopify access tokens are encrypted again on top of that. Passwords are stored as one-way hashes.
Every webhook from Shopify and Stripe is checked against its signature before anything happens.
Only the people who run Afterflow can reach the servers and database, with unique passwords and two-factor authentication. Every dashboard access is logged and kept for a year.
Only the data needed to deliver files and send emails is collected, and customer orders are deleted two years after purchase.
Test data is kept separate from real stores.

A security incident is anything that could expose, change or lose stores’ or customers’ data. When one is suspected, Afterflow:

Contains it. Stops the cause right away: revokes keys and tokens, rotates secrets, and takes affected parts offline if needed.
Assesses it. Works out what happened, which stores and data are affected, and how serious it is, using the access and server logs.
Tells the affected stores without undue delay and within 72 hours, with what happened, what data was involved, what has been done and what they should do. Stores are the controllers and decide whether their customers or authorities need to be told; Afterflow helps them with the details. Shopify is told as its partner terms require.
Fixes and learns. Repairs the cause, restores data from backups if needed, and writes down what happened and what changes to prevent it next time.

If you find a security problem, email antondogena@gmail.com. You’ll get an answer within two working days.