---
title: "Security"
url: https://www.jvpeak.com/security/
description: "How JV Peak handles access to your store and accounts: read-only by default, encrypted keys, secure sign-in, an approval for every change, and a clean exit."
publisher: "JV Peak LLC"
---

Security and data

# Your store, your data, your approval.

We ask for the least access that does the job, keep every key encrypted, log every change, and hand everything back when you leave.

Six safeguards

## How we protect your store.

### Read-only by default

Search Console, analytics, ad accounts and Merchant Center are connected read-only. Write access is added only for the specific changes you approve.

### Keys encrypted

API keys are encrypted at rest with AES-GCM and never shown again after they're saved, not even to us in the interface.

### Secure sign-in

The Command Center sits behind Cloudflare Zero Trust. You sign in with a one-time code sent to your email; there are no passwords to leak.

### Every change approved

Nothing ships without your approval. Theme changes go to a preview branch first, and every approval is logged with who and when.

### A full audit log

Every sync, draft, approval and shipped change is recorded, so you can always see what happened and why.

### AI with limits

Your data is sent to AI models only to answer your questions and draft your fixes. It isn't sold, shared, or used to train models.

## What we ask for

- Shopify: a collaborator account, scoped to what the work needs

- Google Search Console, Analytics and Merchant Center: read-only

- Google Ads and Microsoft Ads: read-only, plus edit rights on Ascent and Summit plans

- Your theme's code repository, if you have one

## What we never ask for

- Payment details, payouts or banking

- Your personal passwords

- Customer passwords or card data

- Ownership of any of your accounts

## When you leave. A clean exit.

You remove our access, and we confirm in writing. Everything we shipped stays on your store. You get an export of your Command Center data on request, and we delete our copy within 30 days.

Found a security issue? Email [info@jvpeak.com](mailto:info@jvpeak.com) with "Security" in the subject. We reply within one business day.

Next step

## Start with an audit. Know what to fix in three weeks.

Your own Command Center for 30 days, a fix list ranked by revenue, and the top fixes drafted and ready to approve.

[Book an audit](https://www.jvpeak.com/contact/) [Run the free AI check](https://www.jvpeak.com/ai-readiness-check/)