How your data and store are protected

• Only the SEO content you approve is sent to your store.
• Only the SEO fields that changed are written. The whole product is never written back, and price and stock fields are never touched.
• Every field written is read back from your store to check it; content that can't be verified isn't counted as published.
• Connection details are tested before they're saved; a connection that doesn't work is never saved.
• You can disconnect or delete the store in store settings at any time. When you delete it, the Roigo Shopify app is removed from your store; on ideasoft and ikas, the app you created in your own panel stays with you and the keys we held are deleted.

• AWS Frankfurt

  Servers, the database and email delivery run in Amazon Web Services' Frankfurt (Germany) region.

• Database closed to the internet

  The database sits in a separate network that can't be reached from the internet, and its disk is encrypted. A synchronous copy is kept in a second availability zone, and the app runs on at least two servers.

• Encrypted connections

  The site and app open over HTTPS only; HTTP requests are redirected to HTTPS. Unencrypted connections between the app and the database are refused.

• Credentials encrypted again

  Store API keys and access tokens are encrypted again inside the database with AES-256-GCM. The encryption key and other secrets live in AWS Secrets Manager, not in the code.

• Daily backups

  The database is backed up automatically every day and backups are kept for 14 days. The database is protected against deletion.

• Attack filtering

  Incoming requests pass through AWS WAF: known malicious IP addresses and known attack patterns are blocked, and the app and API have a per-IP request limit.

• We never store your password, only a salted one-way hash (scrypt).
• The sign-in, sign-up and forgot password forms have a robot check and attempt limits: many failed attempts for the same email or from the same IP address are paused for a while.
• Scripts on the page can't read the session cookie. When you change or reset your password, your sessions on other devices are signed out.
• Our support team can open the app as you see it to solve a problem. This access is limited to 2 hours and every opening is logged.
• The app uses only the cookies it needs to work. On our website, analytics cookies are set only if you allow them in the cookie banner; we use no advertising cookies.

• When Roigo AI writes SEO text, only your product, category and blog content and your store's writing voice are sent to our AI provider.
• The provider doesn't use this content to train models.
• Everything Roigo AI writes arrives as a draft first and isn't sent to your store until you approve it.

• Widgets render only on your store's registered site address and the platform's own address. If the install code runs on another site, no widget appears.
• The widget script sets no cookies for your visitors. View counting doesn't store IP addresses or browser details; a one-way hash unique to that day is used instead and deleted within two days.
• Prize wheel coupon codes aren't in the widget file on your site; the server draws the prize and sends the code only to the winner.
• You are the controller of the email addresses entered in email-capture widgets; we only store them on your behalf. The details are in the data processing agreement.

• You delete it in the app under Settings > Delete account, confirming with your password, without sending a request.
• Your stores, SEO content and history, widgets, statistics, subscriber lists and Google reviews are deleted right away; if you connected Shopify through our app, the app is removed from your store.
• Only your payment records and a record of the deletion are kept for 10 years, as tax and commercial law requires, and then deleted.
• Deleted data stays in backups for at most 14 more days. If you have a bank transfer notice awaiting review, you can delete the account once it's resolved.

Write to us with your questions and reports: hello@roigo.ai