Your store, your code, your data
What we never compromise on
Nothing goes live without your approval
Every change arrives as a PR with a preview and checks. Going live is your decision, and you can turn off automatic actions.
The code is yours and lives in your GitHub
We work in your theme's repository, with branches and PRs. The GitHub app only sees the repositories you choose.
We don't train models on your data
Not with your store's data or your customers', and not with aggregated or anonymized data either. Model providers sign a contract that limits how data is used.
Your store is never compared with others
Each store learns only from its own data. What happens in yours stays in your workspace.
Everything can be undone
One-click rollback, a spending cap that is never exceeded and no charge for failed tasks.
We ask for only what we need
Permissions are requested as you turn on each module, not all on day one, and we explain what each one is for.
What we ask for and why
Every access has a reason. If you don't turn on a module, we don't ask for its permission.
| Access | Why | Scope |
|---|---|---|
| Shopify orders and products | Reports that match Shopify, the audit and A/B test measurement. | Read |
| Shopify theme | Create preview themes so you see every change before it goes live. | Preview; you approve going live |
| Theme repository on GitHub | Open branches and PRs with the code for each task. | Only the repositories you choose |
| GA4, Clarity, Klaviyo and others | Combine your store data with your other tools. | Optional; read |
How we build it
These measures are part of the design from day one, not added at the end.
- Data in the EU
- Hosting in Europe, GDPR compliance and data processing agreements.
- Every brand isolated
- Each workspace's data is kept separate, with automated tests that try to read another's.
- Protected credentials
- Encrypted tokens that expire and rotate. They never appear in logs.
- A sealed box for each task
- Each task runs in its own isolated environment, with no permanent credentials and limited internet access. It is destroyed when the task ends.
- Fixed outbound IPs
- Calls to the Shopify API come from known addresses, including from those environments.
- Outside content is untrusted
- Sites you clone, reviews and emails are treated as untrusted content, with defenses against hidden instructions.
- Everything is logged
- A tamper-proof log of what the agent and each team member do.
- A minimal script in your store
- What we install in your store is small, has no third-party dependencies and runs as an app embed.
Found a security issue?
Email us at info@plantel.io with the subject “Security”. We will reply and tell you what we do about it. If you have questions about how we would handle the data in your store, you can also request access and we will go through your case.
Start with a free audit
Connect your store and we give you 3 to 5 opportunities, ranked by what they're worth in euros, with the first one already built in a preview.
Request your free audit