Security at Invox

Invox connects to the two most sensitive systems a store owns — its support inbox and its Shopify data. We treat that responsibility as the core of the product. This page describes the concrete measures protecting your data.

Encryption

• All traffic is encrypted in transit with TLS (HTTPS enforced via HSTS).
• Integration credentials — email passwords and API tokens for Shopify and ad platforms — are encrypted at rest with AES-256-GCM. The encryption key is stored outside the database, so a database copy alone cannot expose your credentials.
• Account passwords are hashed with bcrypt and never stored or logged in plain text.

Access control

• Two-factor authentication (TOTP) with recovery codes, available on every account.
• Login is rate-limited per IP and per account, with anti-enumeration protections.
• Team members get per-module permissions — an employee only sees the areas the owner enabled. Every workspace is isolated: one store can never read another store's data.
• You can review active sessions and sign out of all devices at any time in Settings.

Your email stays yours

Replies are sent through your own mailbox (your SMTP server) — never from a shared Invox server. Copies are saved to your mailbox's Sent folder, so your complete conversation history lives with your email provider, not locked inside Invox. Disconnect at any time and you lose nothing.

Infrastructure

• Hosted in the EU (Hetzner, Germany/Finland) behind a hardened server: key-only SSH access, intrusion blocking (fail2ban), and security headers on every response.
• Encrypted database backups run daily, with restores tested regularly.
• Shopify access uses the official OAuth flow with expiring tokens — Invox never asks for your Shopify password. The app passed Shopify's App Store security review.

Your rights (GDPR / LGPD)

• Export all your account data as JSON at any time (Settings → Account).
• Delete your account and its data permanently, self-service.
• Shopify GDPR webhooks (data request, customer redact, shop redact) are implemented — store data is purged when Shopify requests it.

AI usage

AI replies are grounded exclusively in your store's own data — order details, your policies, your knowledge base. Every draft shows the sources it was based on, and nothing is sent to a customer without either your approval or the automation rules you explicitly enabled. Your data is never used to train models for other customers.

Reporting a vulnerability

Found a security issue? Email support@invoxreply.com and we will respond promptly. We appreciate responsible disclosure.