All customer data is encrypted in transit with TLS and encrypted at rest. Inside Cifra, access is limited to the people who need it to maintain and support the app, on a least-privilege basis.
Every integration connects through its platform’s own authorization flow. Cifra never asks for your passwords, and you can revoke any connection from that platform at any time.
We keep a documented incident response plan. If a security incident ever affects your data, we notify you and Shopify without undue delay.
Three commitments from our privacy policy, in plain language.
Used for your reports only.
Shopify customer data is processed solely to run your analytics and reports. We never sell it or share it for advertising, marketing or AI model training.
Deleted when you leave.
Uninstall Cifra and the associated data is securely deleted or anonymized in line with Shopify’s requirements. Deletion requests relayed through Shopify are honored.
AI with clear boundaries.
AI features run through providers such as OpenAI and Anthropic under our privacy policy. The MCP server only reaches your store’s numbers when you connect the AI tool you choose.
Write to privacy@getcifra.com with any question about security, privacy or deleting your data.
The full detail lives in our Privacy Policy and Terms & Conditions.