Security and data protection

Merchants trust WebPlatform with their store, their customers and their connected accounts. This page explains, in plain language, how we protect that.

Your data is kept separate

Each merchant's business data, such as orders, customers, campaigns and messages, is kept in its own database. Staff of one business cannot see another business's data.

Encrypted connections and secrets

• Every page and API is served over HTTPS.
• Sign-ins you connect, such as Google and Shopify access tokens, are stored encrypted and are never written to our logs.
• Passwords are stored only as one-way hashes; nobody at WebPlatform can read them.
• Sign-in to the admin area can require a one-time code in addition to your password.

You control connected accounts

• Google Analytics, Search Console and Tag Manager are connected with read-only access. WebPlatform cannot change anything in your Google accounts.
• You can disconnect Google at any time; this removes our access at Google and deletes the saved sign-in.
• The Integrations page shows the status of each connection and lets the account owner test it.

Payments

Card and UPI details are entered on the payment provider's own secure checkout (such as Razorpay, PayU or Stripe). WebPlatform does not receive your CVV; we keep only what the provider sends back, such as the payment status and a masked card number.

Where we host

WebPlatform runs on Amazon Web Services.

Report a security issue

If you believe you have found a security problem, email support@webplatform.co.in with the details. Please give us a reasonable time to fix it before sharing it publicly. We do not take action against people who report issues in good faith.

Contact

Read our privacy policy, terms of service and refund and cancellation policy.