Documentation
Account access, customer data, sending to ad platforms
Access to your accounts is encrypted. Your customers' data reaches the ad platforms only in unreadable form.
- Access tokens (Shopify, Meta, TikTok, Google) are encrypted at rest with AES-256-GCM, and decrypted only at the time of the call.
- Customer data (email, first name, last name, phone) is encrypted at rest. Lookups go through a SHA-256 hash, not the plain-text email.
- Identity fields sent to Meta, TikTok and Google are hashed with SHA-256. An explicit refusal blocks fingerprinting and the sending of email and phone.
- Disconnecting an account deletes its tokens right away. Account deletion is in Settings → Danger zone.
A question these guides don't answer
Reply within 24 business hours.