Security

Service boundary

The public Recommendation Audit reads public Shopify product pages and does not authenticate to or change the target store. The installed Shopify app is a separate authenticated surface. It uses Shopify OAuth scopes to connect the shop, receive configured webhooks, store a monitoring site ID, and support merchant-controlled theme changes.

Infrastructure

• Website and API workloads run on Cloudflare Workers, with application data stored in Cloudflare D1 and related Cloudflare services where used.
• HTTPS is enforced for browser, API, Shopify, and app traffic.
• Public routes use security headers and rate limits where configured.
• Webhook handlers verify Shopify signatures before processing configured events.

Credentials and access

Shopify OAuth access tokens, Colter API keys, dashboard tokens, and session records are stored server-side. They are not sent to the public website client. Shopify scopes limit what the installed app can request, and server routes enforce the applicable session, key, or webhook checks.

The app currently requests product, theme, order, and checkout access needed by its implemented flows. It does not request Shopify analytics access. Theme writes are limited to supported app flows, and a merchant must choose the relevant guided action or confirm the optional theme extension in Shopify.

Stored data

• Product-page audit inputs, public evidence, results, account records, and service diagnostics.
• Shopify shop and authorized-user session data, including the Shopify access token and granted scopes.
• Monitoring identifiers and recorded request, page-view, protocol, checkout, and order activity used by the monitoring views.
• Order ID, amount, currency, line-item count, and activity-match fields; not payment-card details.

Colter does not retain Shopify customer names, email addresses, postal addresses, or payment-card details in its monitoring activity tables. See the Privacy Policy for the fuller data-flow and retention description.

Store changes

Installing the app can store the provisioned Colter monitoring site ID in a shop metafield. The optional theme extension sends browser page-view signals only after it is enabled in Shopify. Supported theme-file or extension changes occur through explicit merchant-controlled flows. Colter does not change product titles, descriptions, prices, images, or inventory. Any future change to that boundary would be disclosed separately.

Compliance claims

Colter does not claim SOC 2, ISO 27001, PCI DSS, or GDPR certification. This page describes current implementation practices and is not a certification, warranty, or guarantee. Merchants with regulated-data requirements should review the data flow before installation.

Report a security issue

Email team@agenticcom.aiwith the affected URL, steps to reproduce, and the smallest proof needed to show the issue. Do not access other users' data, disrupt the service, or retain data beyond what is necessary to report the problem.