Access with care. Ownership with you.
Security practices are part of operating commerce responsibly, not a decorative badge.
Merchant ownership
Shopify stores, domains, product data, advertising accounts, analytics, payment methods and customer records remain with the merchant. Zorven works through authorized permissions.
Least privilege and authentication
We request only the access required for agreed work. Team members use individual identities and two-factor authentication where supported. Shared personal passwords are not part of the process.
Controlled changes
Material store and campaign changes are documented. Media spending follows merchant-approved budgets. Rollback procedures and incident communication form part of the operating plan.
Data handling
Customer and order data is used only as needed for the engagement. Access, retention, deletion and incident notifications are agreed with the merchant in writing.
Reporting and exit
Monthly order-level reconciliation is shared with the merchant. On termination we provide an agreed handover and remove Zorven access.