Security and seller control are core to how Kaptureflo is designed. We protect your store data, keep your access tokens safe, and ensure no action takes place without your review.
1. Encryption in transit
Everything is encrypted in transit with HTTPS.
2. Token and key security
Access tokens and messaging provider keys that you connect are stored encrypted on our servers. They are never exposed to the browser or made accessible in client-side code.
3. Data separation
Each seller's data is separated by account, with role based access to internal databases.
4. Seller control and approvals
Kaptureflo does not spend your ad budget or publish messages on its own. Ad campaigns are always prepared in a paused state, and messages wait for your approval before anything is delivered.
5. Opt-outs respected
Opt-outs are recorded and respected.
6. Disconnect Shopify and Meta
You can disconnect Shopify and Meta at any time in the app and revoke tokens.
7. How we use Meta data
When you connect Facebook and Instagram ad accounts, your Meta data is handled under strict guardrails:
- Ads are created paused, giving you time to review targeting, budgets, and creative assets.
- Campaigns are pushed only after you review and approve them.
- Campaigns are created only in your own connected ad account.
- Meta data is used only to provide the specific marketing features you requested.
8. What we do not claim
We value plain honesty. We do not claim external certifications (such as SOC 2 or ISO) or formal third-party penetration test audits. We focus on practical, verifiable security practices: encryption, token protection, and seller approval.
9. Reporting a concern
If you discover a security issue or have questions about our security practices, please contact us immediately at info@kaptureflo.com. You can also visit our Contact page or read our Privacy Policy.