Rewardfinity

Security

How Rewardfinity protects Shopify loyalty data.

Application controls

Embedded routes authenticate the Shopify admin session. Database reads and writes are scoped to the installed merchant. Incoming Shopify webhooks are verified before processing and duplicate event identifiers are ignored.

Data integrity

Points are integers and money values are integer cents. The points ledger is append-only: corrections use new adjustment entries instead of changing historical rows.

Report an issue

Send security reports to singhanhad78@gmail.com with steps to reproduce and the affected URL. Do not access data that does not belong to you.