Data and encryption
What Marginful stores, what it never stores and how it is protected.
Personal data is minimised
For each customer, Marginful stores only:
- the Shopify customer ID,
- a display name of first name and last initial, for example "Dana L.",
- a SHA-256 hash of the lower-cased email, to recognise returning customers,
- the country.
Marginful does not store raw customer emails, phone numbers, street addresses, postal codes, payment card numbers or IP addresses.
Shipping country, province and city are read for cost rules and geography reports. Line-item details such as optical prescription values are stored only to calculate lens costs, and are erased on a customer erasure request.
Encryption
- All traffic uses TLS.
- Credentials for Shopify, ad platforms, payment providers and other services are encrypted at rest with AES-256-GCM. They are never sent to a browser.
- API tokens are stored as a SHA-256 hash.
- Every Shopify webhook is verified with its HMAC signature.
Access control
- Each person has a role that limits what they can see and change. See Team and roles.
- Changes to configuration and privileged actions are recorded in the audit log.
AI features
Optional AI features send aggregated, non-identifying figures to Marginful's AI provider only when you use them. When Smart import uses AI to map columns, it sends up to 20 sample rows with personal data masked.
Sub-processors
Hosting and database, email delivery for reports, and the AI model provider when AI features are used.
Was this page helpful?