Security

How we keep your data, store, and ad accounts safe.

Encrypted by default

All data is encrypted in transit using TLS and at rest using industry-standard encryption. Connections to Shopify, Meta, and other platforms use OAuth and scoped permissions.

Least-privilege access

Kluck asks only for the permissions it needs. Campaign changes and content publishing in Shopify or Meta require your explicit approval before they go live. A connected Claude or ChatGPT connection follows the same rule for Shopify and Meta changes; a product creative it generates uses credits as soon as it's requested.

Authentication

We use secure sign-in, session management, and passwordless options where available. Claude and ChatGPT connect through OAuth: an owner or admin grants access to one workspace, Kluck issues a short-lived connection token, and the longer-lived renewal token is stored only as a one-way hash — never in a form anyone, including us, can read back. You can revoke access or disconnect integrations and connectors at any time from Settings.

Monitoring

We log access, monitor for anomalies, and run regular security reviews. If we ever discover a security issue, we will notify affected users promptly.

Report a concern

See something unusual? Contact us at growth@kluck.ai.