Security

Last updated: 9 November 2026

Infrastructure

• Hosted on Google Cloud (Cloud Run and Cloud SQL, region europe-west1, Belgium).
• All traffic uses HTTPS (TLS). The app connects to the database through Google's encrypted Cloud SQL connector.
• Data at rest, including daily database backups (kept 7 days, with point-in-time recovery), is encrypted by Google Cloud.
• Secrets (API keys, database credentials) are stored in Google Secret Manager, never in code.
• Test and development data never touches production: development uses a separate app and a local database.

Access

• Only the people who operate Trackrobin can access production, each with their own account, a strong password and two-factor authentication.
• Access to the cloud project and database is logged by Google Cloud audit logs; requests to the app are logged.
• Merchants only see their own store's data; every request is authenticated with Shopify session tokens or signed webhooks.

Data minimisation and retention

We request only the Shopify data needed for tracking and notifications and delete data on the schedule in the privacy policy.

Incident response

1. Detect and contain: revoke affected credentials and tokens, block the cause, keep logs as evidence.
2. Assess: determine which stores and which data are affected and the risk to customers.
3. Notify: inform affected merchants without undue delay and within 48 hours, and Shopify where its platform data is involved, so merchants can meet their own 72-hour notification duties.
4. Recover: restore from encrypted backups if needed, fix the root cause, rotate secrets.
5. Review: write a post-incident report and update this process.

Report a vulnerability

Email support@trackrobin.com. We reply within 2 business days.