Credentials encrypted
Marketplace API keys and authorization tokens are encrypted with AES-256 before storage. They are never stored or displayed in plaintext.
Encrypted in transit
All communication between clients and our servers is protected with TLS against interception and tampering.
Data isolation
Each seller account is an isolated data space. Business records are scoped and validated by ownership; cross-tenant queries are not performed.
Least privilege
Account passwords are stored as bcrypt one-way hashes. Within the system, menu, action and data permissions are granted by role.
Audit trails
Sign-ins, order handling and configuration changes are written to audit logs for after-the-fact investigation.
Purpose limitation
Marketplace data is used only to provide the ERP service itself — never for advertising, profiling or resale.
Retention limits
Data is kept only as long as the service requires, and deleted or returned within an agreed period after termination.
Your rights
You can access, correct, export or request deletion of your data at any time, and can revoke authorization or close your account.
For the detailed rules on processing, sharing, retention periods and your rights, see our
Privacy Policy. For the rights and obligations between us,
including limitations of liability, see our
Terms of Service.