Security

Account access uses Supabase Auth (email and Google). Sessions follow industry-standard practices.

Payments are processed by Paddle as Merchant of Record. StoreOpps does not store card numbers.

Uploaded CSVs require a signed-in account and are used to generate your reports. Ask hello@storeopps.com to delete account data.

We avoid logging passwords, OAuth tokens, card data or full customer CSV contents.