Security

How we protect your store and customer data.

OrderCtrl only uses order data to run your post-purchase experience. Here’s how it’s protected.

  • Customer details are encrypted

    Names, emails, phone numbers and addresses from your orders are stored encrypted, and so are your store and app connection keys.

  • No passwords for customers

    Customers sign in with a one-time code that expires in 15 minutes, with limits on attempts. Guests see masked details.

  • Verified connections

    Updates from WooCommerce and shipping carriers are signature-checked before OrderCtrl uses them.

  • Private photos

    Claim photos are stored privately and shown only through links that expire.

  • Team permissions

    Owner, admin and analyst roles, so teammates only reach the settings they need. Two-factor authentication is available for every account.

  • Data retention

    Customer details can be anonymized, and email logs are cleared after 90 days.

  • API keys you control

    Create, rotate and revoke API keys for your helpdesk at any time.

  • Your domains

    Your portal and emails can run on your own verified domains.