Security and privacy

Minimal data, least privilege, and evidence-backed controls.

Least-privilege Shopify access.
No unnecessary customer contact data in the recovery workflow.
Minimized persistent Shopify session data.
Authenticated privacy/compliance webhooks.
Shop-scoped deletion behavior.
No raw access tokens or protected customer payloads in normal application logs.
Rolling 90-day retention for checkout-derived history and sync runs.
Encrypted logical Google Drive backups with checksum verification.
Restore/privacy reconciliation is required before a restored database can receive traffic.

Current launch posture

Marlee Recover is still completing private-beta verification. Security claims on this page are intentionally limited to controls that are implemented or directly evidenced.