Infrastructure
- Dedicated servers in the European Union (Germany), managed by us.
- Each app runs isolated, with its own database and its own credentials.
- No third-party analytics, trackers or advertising code anywhere in our apps or sites.
Encryption
- In transit: HTTPS/TLS everywhere, including app proxies and webhooks.
- At rest: databases live on an encrypted volume (LUKS2, AES-256-XTS) unlocked only by the server itself.
- Backups: encrypted with AES-256 before they are written to disk.
- Links: unsubscribe and preference links are signed (HMAC-SHA256) so they cannot be guessed or forged.
Access control
- Server access is limited to the developer and uses SSH key authentication.
- Application secrets live in environment files readable only by root.
- Authentication and application request logs are retained, so access is traceable.
- Automated brute-force protection (fail2ban) is active on the server.
Application security
- All Shopify webhooks are verified by HMAC; invalid signatures are rejected.
- Database access goes through a query builder with parameterised queries — no string-built SQL.
- Outbound requests are restricted to known destinations, to prevent server-side request forgery.
- All values that end up in email headers are stripped of control characters to prevent header injection.
- Each store's data is scoped to that store at the query level, so one merchant can never reach another's data.
Backups and recovery
- Every database is backed up daily, encrypted, and kept for 7 days.
- Restores are tested — a backup that has never been restored is not a backup.
- Uninstalling an app deletes its data; the deletion also propagates out of backups as they expire.
Incident response
- Contain — isolate the affected component, revoke exposed credentials, stop further data flow.
- Assess — establish what data was involved and which stores are affected, using server and application logs.
- Notify — inform affected merchants without undue delay, and the supervisory authority within 72 hours where a personal data breach has occurred.
- Remediate — fix the root cause, deploy, verify.
- Review — document what happened and what changed so it cannot repeat.
Reporting a vulnerability
Email app@liutomedia.lt with steps to reproduce. We confirm receipt quickly, keep you informed while we fix it, and are happy to credit you. Please do not test against stores that are not your own, and give us reasonable time before disclosing publicly.
What we do not claim
We have no SOC 2, ISO 27001 or third-party penetration test yet. When that changes, it will be stated here with the date and the auditor — not before. If your organisation requires a formal audit before installing, write to us and we will tell you honestly where we stand.
See also: privacy policy · terms and DPA · GDPR & CCPA
