Security and data handling
We work inside your store’s code, so access is set up to be easy to grant, limited to what the job needs, and easy to take back.
How we access your store
Our own accounts, the narrowest permissions, and never your password.
- Shopify
- A collaborator account with the Themes and Edit code permissions only, nothing else. Every action is traceable to our account, and you can revoke it at any time.
- WordPress
- A staging login of our own, on a staging copy of your site.
- Passwords
- We never ask for, or accept, an owner’s login or anyone else’s password. If someone sends one, we’ll ask them to change it.
- Where changes happen
- On a duplicate theme, a branch or a staging site. Never the live store. You publish, or we do on your written go-ahead.
- When the job ends
- Remove our access. We’ll remind you.
Code, data and reports
- Your code and your customers’ dataWe use AI-assisted tooling under strict data controls: your code and your client's customer data are never used to train AI models, and every change is engineered, reviewed and tested by people. We access stores only through a Shopify collaborator account (or a staging login for WordPress) and never ask for passwords.
- How reports are sharedAudit reports, change logs and before/after reports are shared through a secure method we agree at intake, not email attachments or the contact form.
- Our own accountsWe keep client files and personal data in a small number of business accounts protected with two-factor authentication.
- How long we keep job filesAudit reports, change logs and other job files: kept for up to 7 years, for tax and legal reasons. The privacy policy lists every retention period.
- Report a security problemTell us at everest@tabstopstudio.com before telling anyone else, and we’ll work with you to fix it.
Questions about access?
Ask before you grant anything. We reply within 1 business day.