Security

Last updated October 18, 2026

• Encryption in transit — every connection between the Software, our server and the platforms uses HTTPS.
• Keys stay local — store tokens, platform tokens and your AI key are stored on your computer.
• Secrets stay on the server — the private keys of our shared Facebook and Google sign-in apps never reach users' computers.
• One store, one key — each store key only works for the store it was made for; requests for other stores are refused.
• One-time sign-in codes — codes passed during sign-in can be collected once and expire within 10 minutes.
• Least privilege — we request only the permissions each feature needs and explain every one in this Trust Center.
• Automatic deletion — server data such as store chats is deleted automatically on a fixed schedule.

Report a problem

If you believe you've found a security issue, email support@elefairtech.com with the subject Security report. Please give us a reasonable time to fix it before sharing details publicly.