Effective date: 31 July 2026
Store Huddle is operated by Slurvo FZ-LLC and is designed to protect merchant, staff, and Shopify customer information using administrative, technical, and organizational controls.
Security Controls
Store Huddle encrypts data in transit using HTTPS, and every session is authenticated through Shopify’s OAuth flow, so access to a workspace is tied to a verified Shopify session rather than a separate Store Huddle password.
Each merchant’s workspace is logically isolated from every other merchant’s data. Access within a workspace is governed by role-based permissions, so a user only sees the rooms, channels, and information their role allows. Files and uploads are only reachable through authenticated, time-limited links rather than public URLs, and inbound requests from Shopify, including webhooks, are cryptographically verified before we act on them.
Production infrastructure runs on established cloud providers with their own independent security and compliance programs. Access to production systems is restricted to authorized personnel on a need-to-know basis, and encryption and access controls are applied wherever the underlying infrastructure supports them. We don’t publish further implementation detail here, since doing so mainly helps attackers, not merchants; if you have a specific security question as part of a vendor review, email us and we’ll work through it directly.
Analytics and Tracking
We use Google Analytics inside the app to measure feature usage and diagnose problems. It is configured for product analytics only: advertising features and Google Signals are disabled, and we do not run advertising or retargeting pixels anywhere in Store Huddle.
Message content, file contents, task contents, and Shopify customer personal information are not intentionally sent to our analytics provider. Full detail, including how to opt out, is in the Privacy Policy.
Incident Response
We investigate suspected security incidents and take reasonable steps to contain, remediate, and document confirmed incidents. Where legally required, affected merchants or authorities will be notified without undue delay.
Vulnerability Reporting
To report a suspected vulnerability, email support@storehuddle.com with the subject:
Security report
Include reproduction steps, affected URLs or features, and the potential impact. Do not access another user’s information, disrupt production, use social engineering, or publicly disclose an unresolved vulnerability.
We will acknowledge good-faith security reports and investigate them as reasonably practicable. Submission of a report does not create entitlement to payment or participation in a bug-bounty program.
Contact
Slurvo FZ-LLC
SFFO0050, Compass Building, Al Shohada Road,
Al Hamra Industrial Zone-FZ, Ras Al Khaimah, United Arab Emirates
Email: support@storehuddle.com