Security
We handle your business data with care. Here is how Xeasy protects the information entrusted to us.
Encrypted connections
All traffic to Xeasy is served over HTTPS/TLS, so data between your browser and our platform is encrypted in transit.
Credential protection
Store connection credentials and tokens are stored encrypted and are never exposed to the browser or other users.
Seller data isolation
Each seller organization's data is logically isolated. Access is validated on the server for every request, export, and background task.
Least-privilege access
Platform access follows the principle of least privilege. Administrative operations require elevated permissions and are logged.
Authorization-scoped data use
Marketplace data is processed only within the scope of the authorization you grant and the permissions approved for the application.
Logging & auditability
Sensitive operations are logged. Logs are handled with data minimization in mind, and sensitive values are not written to logs.
Data minimization & deletion
We collect and process only the data needed to provide the service, and we support data deletion when you disconnect a store or close your account. For details on what we collect and how long we keep it, see our Privacy Policy.