Security
Your data is safe with us. Here's how.
PixlBridge holds the keys to your ad accounts and details about your customers. This page explains how we protect them: each measure by its technical name, with what it means.
Protected by design
- Your logins are encrypted (AES-256-GCM)
- Customer details are SHA-256 hashed (scrambled one way) before they're stored
- Each business only ever sees its own data
- The tracking on your store follows your store's cookie-consent settings
- Card details never touch PixlBridge
The basics
Six ways we protect your data
Your logins are locked away
Your Facebook and Shopify access is encrypted (AES-256-GCM) before it's saved, with a key kept separately. Everything travels over HTTPS.Customer details are SHA-256 hashed
Emails, phone numbers, names, addresses and customer IDs from Shopify orders are SHA-256 hashed (scrambled one way, so they can't be read back) as they arrive. Plain values are never stored or logged.Each business is kept separate
Every piece of data belongs to one business (workspace), and every database query is limited to it. Automatic tests check that one business can never see another's data.Only real messages get in
Messages from Shopify and Stripe are checked with a secret signature (HMAC) and refused if it doesn't match. Sign-in links with Facebook are single-use and expire after ten minutes.People only see what they should
Owner, admin, member and viewer roles, checked again on every request. Our own support access is separate, time-limited and written to an audit log.Links that can't be misused
Amazon tracking links (coming soon) will only ever go to Amazon. Sign-in, sign-up, password reset and invites are rate-limited, and error messages never reveal how the system works inside.
The details
What we keep, and where it goes
What we keep
- Your account: name, verified email, a password hashed with bcrypt, and which businesses you belong to with what role.
- Your connections: encrypted sign-ins for Facebook and Shopify, and the accounts, store and tracking you picked.
- Clicks on tracking links: the link, the time, an ID from the ad click, a first-party browser ID, device and browser type, a normalised IP address and the browser's user agent.
- Sales: Shopify order values, currency, product IDs and SHA-256 hashed customer details (and, once Amazon opens, Amazon Attribution totals per link).
- Billing: Stripe customer and subscription IDs. Your card details never touch PixlBridge.
Where it goes
Hashed customer details and sale details are sent to Meta through the Conversions API (CAPI) for the tracking you picked. Once Amazon tracking opens, Amazon Attribution tags will be created in your Amazon Ads account. With the AI Ad Creator, the product photo you choose, its title, type and vendor and your note go to Google's Gemini API to make your images and videos; they are stored privately in Cloudflare R2 and shown only through links that expire within minutes (details). Nothing is sold, shared with other advertisers, or used to build profiles across customers. Our sub-processors are listed in the data processing addendum.
Privacy requests and Shopify
The Shopify app handles Shopify's privacy requests automatically (customers/data_request, customers/redact and shop/redact). Deleting a customer removes their hashed details; deleting a store removes its data. When a business owner deletes their account, everything for that business is deleted.
Checked, not assumed
The code has a written threat model and a security review in which each finding was reproduced; the tests for them stay in the test suite. Open findings and accepted risks have owners. We audit our dependencies and keep Node and Postgres up to date.
Behind the scenes
- The database can't be reached from the internet; only the web front door is exposed.
- Encrypted database backups every night, with copies kept off-site; the encryption key is stored apart from the backups.
- Every background job is recorded per business, which is what powers the “Is tracking working?” checks you see in the app.
- Developer API documentation is switched off in production unless it's explicitly enabled and password protected.
Found a security problem?
Email security@pixlbridge.com. We reply within two business days, keep you informed, and credit researchers who want to be credited. Please don't access other customers' data while testing: use your own account (a free trial works).
Have a security questionnaire?
Write to us and we'll answer with specifics, not marketing.