Security & Privacy

Tenant Isolation Invariant

ØSTEN is designed from the ground up as a secure multi-tenant platform. Every query to PostgreSQL is strictly scoped to the authenticated user's active organization_id. Tenant context is validated in middleware on every API request. A customer from Organization A can never query, inspect, or leak data belonging to Organization B.

Data Minimization & Hashing

• Customer Data Protection: Customer email addresses and personal identifiers ingested from Shopify orders are stored hashed (SHA-256) for attribution matching without storing plaintext PII.
• No Public Model Training: Your store sales, revenue margins, ad creative performance, and customer profiles are never used to train public foundation models or shared across clients.

Credential Management & OAuth Scopes

• Minimal Permissions: OAuth integrations with Google Ads, Meta Marketing API, and TikTok Ads request strictly necessary scopes for reading campaign performance and writing paused draft campaigns.
• Revocation Safety: Disconnecting an integration immediately revokes and deletes stored access tokens from the database.
• Secrets Invariant: API secrets and service account keys are stored securely in GCP Secret Manager / Cloud Run environment variables and never committed to source code.