Security
Your shop, your money, your buyers.
You are trusting us to run the thing that pays you. Here is exactly what that means — what we hold, what we never touch, and what happens on the worst day.
The short version
We run the shop. We don't hold the money.
Buyers pay into your Binance, Bybit or OxaPay account — the keys live in your shop and the money goes straight to you. There is no step where your takings sit with us, because there is no account of ours for them to sit in.
Your payment accounts
You connect them in your panel. Payments are verified against your own account, and settle to it.
Your bot token
If you connect a Telegram bot, it runs under the token you give us, in your name — take it back from @BotFather whenever you like.
Your buyers
Your customer list, orders and balances belong to your shop. Ask while it is running and we will export the lot for you.
Getting in
A password is not enough, so we don't allow one.
Your admin panel asks for a username, a password and a code from your authenticator app. Not an option you can forget to switch on — it is how the panel opens.
Two-factor, always
A six-digit code every time, and each code works once — a stolen one is already spent.
Devices you can see
Every signed-in device is listed. End one you do not recognise, or make a new password and end them all at once.
HTTPS everywhere
Your panel, your bot and your shop website, with certificates renewed automatically.
We cannot read your password
It is stored as a hash. Nobody here can look it up or tell it to you — you can only set a new one.
Your data
Separate shops, separate databases.
Your shop's catalogue, buyers and orders live in their own database — not in one shared table with every other customer's rows beside yours. A mistake in somebody else's shop cannot reach into yours.
Backed up every 15 minutes
A full dump of every shop, kept as 96 restore points — the last 24 hours, any one of which we can put back.
Pausing is not deleting
If a plan runs out the shop stops serving and nothing is thrown away. Renew and it comes back exactly as it was.
Updates without downtime
Changes are installed, checked, and rolled back automatically if anything fails to start.
Keeping the neighbourhood clean
What we don't let shops do.
A shop pretending to be an official brand store puts every shop on the platform at risk, so the software refuses brand names where it can, and we act on the rest.
Automatic
- Brand names refused as a shop's name or address
- Sign-up limits, so nobody can bulk-create accounts
- Every payment reference checked once and only once
Being honest about it
What we can see, and what we can't.
We can see
Your account and the shops on it, their settings, and the bot tokens needed to run them — a shop cannot run without them.
We never see
Your panel password, and the passwords of the buyers in your shop. We take no cut of a sale and hold none of its money.
What we can't promise
That it never goes down. Telegram, payment providers and networks fail sometimes. We watch it around the clock and say so when it happens.
Found something that looks wrong? Tell us before you tell anyone else — write to @Ahsan_Labs and we will answer. We would far rather hear it from you.
Run your shop on something that takes this seriously.
Your token, your money, your buyers — backed up every quarter of an hour.