Trust

Trust: the plain facts

What Zyro reads, how it is kept safe, where it runs and how to reach us. Each part links to the full page.

Last updated:

Your data

  • Zyro does not ask Shopify for shoppers' names, emails or addresses on orders.
  • Card details never reach Zyro. Stripe or Shopify handles payment.
  • We don't sell personal information.
  • We remove the full IP address after 90 days; the country stays.
Security and your data

How it is kept safe

  • Every page is served over HTTPS.
  • The database and its backups are locked with AES-256 encryption when stored.
  • Keys for the tools you connect are locked before they are stored, and never shown again.
  • A full backup runs every night, and each one is checked.
  • Every person or tool that touches the live database is logged.

Where it runs and who helps

Zyro runs on Amazon Web Services in the United States. AI features use Anthropic and OpenAI. Stripe takes payment from customers who pay Zyro directly.

The full list of sub-processors

If something goes wrong

The status page shows each part of Zyro, checked within the last minute. It shows the state right now and keeps no history.

If a breach could cause serious harm, we tell the people it affects, the privacy regulator and the stores it affects. We do this without undue delay.

To report a security problem, email hello@zyro.world. Our security.txt file lists the same contact.

Is Zyro working? security.txt

If you leave

On Shopify, uninstalling Zyro ends your subscription. If you don't reinstall within 48 hours, Zyro erases your store's data.

What this page leaves out

Zyro holds no outside security certificate today. This page lists only what is in place now.