Security

Reading your sales without touching your store

Here’s what data we read, what we do with it and how we protect it. No promises we can’t back up: we don’t have external certifications or audits, and we don’t claim to.

Read-only
Encrypted keys
Data hosted in the European Union

The connection is read-only

The Pindash connection only sends read requests to your store: it never creates, edits or deletes orders, prices, customers or stock, not even to check permissions. On PrestaShop, the Pindash module connects your store in one click: it turns on the webservice if it’s off and creates a read-only key. If you turn on order source tracking, it saves in your store where each purchase came from, without changing products, prices, amounts or payments.
You use a dedicated key for Pindash, which you can turn off at any time from your store.
Each platform’s guide tells you which read permissions to grant. When your store lets us see the key’s permissions and we detect that it can write, we warn you so you can restrict it.
The connection uses the PrestaShop webservice, with the read-only key created by the Pindash module, or the WooCommerce API. Each platform’s requirements are on its integration page.

Your buyers’ data

We store the minimum needed to calculate your numbers: a pseudonymous ID for each buyer and the details of each order (number, dates, statuses, amounts, currency, products and refunds).

We never store these buyer details: names, addresses, phone numbers, emails, payment details, passwords or free-text order notes. If your store’s API returns those fields, they’re discarded before anything is saved.

Source of each order: if your store saves it, the channel the order came from (referring domain, campaign, landing page and device type), never the buyer’s IP address or browser. It’s deleted 24 months after the order, leaving only totals by channel. How it works

A pseudonymous ID is still personal data, which is why we sign a Data Processing Agreement with you.

Your payment details for Pindash are handled by Stripe when you subscribe to a plan. Pindash stores references to the payment and subscription, not your full card number.

How we protect the service

Your store keys, encrypted

Each key is encrypted with AES-256-GCM and its own key, which is in turn protected by a master key kept outside the database. Keys never appear in URLs, logs, emails or exports; the PrestaShop module’s key arrives only once, server to server.

Every account isolated

Permissions are checked on the server, and on top of that the database uses row-level security to stop one account from reading another’s data.

Secure connections

We only connect to stores over HTTPS with a valid certificate, we don’t follow redirects with your credentials, and we block internal addresses to prevent misuse.

Team access

Support access to a store’s data is minimal, temporary, tied to a support ticket and logged.

Backups

Backups are encrypted before they leave the server, stored in another data center in the European Union, and restores have been tested.

Incidents

If a security breach affects your buyers’ data, we’ll tell you without undue delay and no later than 48 hours after we become aware of it, with the information available.

Where the data lives and who helps us

The app, its database and this website are hosted on a private OVHcloud server in Gravelines (France). Encrypted backups are kept in OVHcloud object storage in Strasbourg (France): a different data center and region in the European Union, with the same provider.

Service providers
Purpose	Provider	Access to your buyers’ data?
Hosting for the app, the database and this website	OVHcloud, through OVH Hispano S.L. (Gravelines, France)	Yes, as a sub-processor
Encrypted backups	OVHcloud, through OVH Hispano S.L. (Strasbourg, France)	Yes, encrypted
Payments (card and PayPal)	Stripe	No
Invoicing	Holded	No
Service emails	Brevo	No: emails don’t include data about specific buyers
Support email	Google Workspace	No, except whatever you write to us
pindash.pro domain and DNS	Sered	No

If you connect Pindash to an AI assistant, the numbers you look up go to that assistant and are subject to its own terms.

How long we keep data

While your service is active, the history your plan includes.
When your trial ends without subscribing, or when you cancel: 30 days frozen so you can view and export; after that, your stores’ data is deleted.
Backups are kept for 14 days: deleted data also disappears from them within that time.
Invoices and signed agreements are kept separately for the applicable legal periods.

Found a security issue?

Write to us from the Contact page, choosing “Security or privacy” as the reason, or by email.

Report an issue