Start your brief

Security and your data

How Stallrow protects your keys, your customers and your orders, and the few things that are up to you.

Updated Oct 25, 2026

Your data is yours: products, customers and orders. Here is how it is looked after.

What Stallrow does

  • Keys and connections are encrypted. Marketplace keys, payment keys and access approvals are stored encrypted and are never shown again in full. Your licence key shows only its last four characters.
  • You sign in on the marketplace's own page. When you use Connect, Stallrow never sees your marketplace password.
  • Card numbers are never stored. Shoppers type them on the payment company's own page or form.
  • Secrets stay out of the logs. Keys are masked in anything Stallrow records.
  • The licence check shares almost nothing. It sends only your web address, the software version and a random install number.
  • Roles limit what people can see and change. See Staff roles and permissions.
  • Sign-ins are protected. Five wrong passwords lock a sign-in for ten minutes, and people are signed out after a period of inactivity.
  • Shopper accounts are protected too. Password reset links last one hour. Closing an account removes personal details.
  • Emails carry no tracking pixel. We do not watch who opens them.
  • Stock history is only added to. Nothing is quietly edited.
  • Feed links are private, and you can replace one at any time.

What is up to you

  1. Use long, unique passwords and do not share them.
  2. Keep keys private. Never email a full key. If one is shared by mistake, replace it in the marketplace and tell us.
  3. Remove ex-staff the day they leave.
  4. Look after exports. They contain customer details. See Exporting your data.
  5. Know your marketplace rules. Amazon, for example, has rules about how buyer names and addresses may be kept.

Backups

Ask us to confirm a nightly backup before your first real sale. Whoever hosts your store is responsible for making sure it happens. See Hosting options.

The secret code

Stallrow encrypts your keys using a secret code held on the server. It must never be changed after connections exist, or saved keys become unreadable and you would need to enter them again. We take care of this for you.

Tax, accounting and privacy laws differ by place. Stallrow helps you keep records. Ask your accountant or adviser about your own obligations.

If you think something is wrong

Tell us at once, with what you saw. See How to ask for help.