Skip to content

Security & data handling

Máximo moves customer and order data from your Shopify store to the platforms you connect. This page covers how that data is protected along the way. For the contractual terms, see the Data Processing Addendum.

Section titled “Consent comes first”

Every send checks the shopper’s consent before anything else happens. Máximo reads each shopper’s choice from your Shopify consent banner, and a shopper who declines is never sent to an ad platform. See Consent and Shopify Customer Privacy for how each destination is gated.

Customer details are hashed

Section titled “Customer details are hashed”

Email addresses, phone numbers and other customer identifiers are SHA-256 hashed before they’re sent to ad platforms, which match on the hash, not the original value.

Klaviyo is the exception. As your email and SMS platform, it needs a customer’s actual email address to reach them, so it receives it unhashed.

Where data is stored

Section titled “Where data is stored”

Máximo runs on AWS in the United States (Oregon, us-west-2).

  • Databases, file storage, caches and event streams are encrypted at rest.
  • The access tokens Máximo uses to connect to your platforms are encrypted separately, with AES-256-GCM.
  • Shopper identity details are encrypted again inside the application, on top of storage encryption.

Privacy requests

Section titled “Privacy requests”

Máximo handles all of Shopify’s mandatory privacy requests:

  • Customer data requests: Máximo prepares a report of what it holds about the customer, which you can download in the app.
  • Customer redaction: Máximo erases that customer’s data within 30 days.
  • Shop redaction: after you uninstall, Shopify’s request removes your store’s data.

Who can access your data

Section titled “Who can access your data”

Inside Máximo, what each person can change depends on their role (Owner, Admin, Editor or Viewer). See Team access & roles.

AI tools connected over MCP sign in as a person on your team. Each connection gets an access level (view only, change catalog, or change settings), never more than that person’s role allows, and changes need a confirmation step before they’re applied.

Section titled “Legal”