Legal
Security
Draft, pending legal reviewNot yet reviewed by a lawyer and not binding. It will change before launch.
Draft 0.1Last updated: pending first publication
Handychat can talk to shoppers and change orders, so we limit what it is allowed to do and check what it says. This page describes the controls we run today. It is a draft, and we will not describe a control here that we do not run.
Overview and our approach
Our approach is to make the risky moments explicit. The agent can answer and recommend freely. Anything that changes an order needs the shopper to confirm and prove who they are first.
Verified order actions and shopper identity checks
Before the agent changes an order, it verifies the shopper with a one-time code sent to the email address on file for that order. It also asks the shopper to confirm the exact action before it runs.
- One-time-code verification before any order change.
- Confirmation before actions: the shopper sees what will happen and approves it.
- Idempotent actions: a retry or a double click cannot apply the same change twice.
Confidence gating and human handoff
A second model checks automated replies for quality and safety before they are sent. When the check fails or the agent is unsure, it does not guess: the conversation goes to a person on the merchant's team, with the context attached.
AI disclosure
Automated replies are labeled as AI. A shopper can ask for a person at any time.
Data protection
Access tokens for connected services, including Shopify and messaging channels, are stored encrypted with AES-256-GCM. Traffic to Handychat uses HTTPS. Rate limits protect public and per-store endpoints from abuse.
Tenant isolation
Every request and background job is scoped to a single merchant's store. Data belonging to one merchant is not returned to another.
Infrastructure and subprocessors
Handychat runs on managed cloud services from the providers listed on the Subprocessors page. Incoming webhooks from Shopify and from messaging channels are verified by their signatures before we process them; unsigned or invalid requests are rejected.
Shopify compliance webhooks
Handychat handles Shopify's mandatory privacy webhooks: customer data request, customer redact and shop redact.
Incident response and breach notification
If we confirm a security incident that affects merchant or shopper data, we will investigate, contain it and notify affected merchants without undue delay. The notification terms will be finalized in legal review.
Vulnerability disclosure and contact
If you believe you have found a vulnerability, write to privacy@handychat.ai with the steps to reproduce it. Please give us a reasonable time to fix it before you share details publicly, and do not access data that is not yours.
Certifications and audits
None yet. Handychat does not currently hold third-party security certifications or audit reports. If that changes, we will list them here.