Security & sign-in
How your store, your prices and your buyers' data are protected — sign-in options, two-factor, roles, sessions and audit.
Your prices and data stay yours
Each store's data is isolated from every other store at the data layer. Wholesale prices are only ever sent to approved, signed-in buyers — never to a public visitor's browser, never into logs and never through the read-only API — and your payment-gateway secrets are write-only once saved.
Signing in to your admin
- Google sign-in, or an email and password, for you and your team.
- Two-factor authentication with any authenticator app (Google Authenticator, Authy, 1Password…) — turn it on for your own login in Settings → Sign-in security.
- Repeated wrong passwords lock the account temporarily, and sign-in attempts are rate-limited per account and per network.
- Settings → Sessions shows every device signed in to your admin, and signs any of them out instantly.
Your team
Give each teammate a role that grants only the areas they need, including whether they can see wholesale prices at all. The store owner always keeps control of the team, and nobody can grant permissions they don't hold themselves. The audit log records who changed what, and when.