Security and trust
doue applies least privilege, records actions, and hands off requests when evidence is insufficient.
Security and trust
This page describes confirmed mechanisms only.
By default, Shopify access is for lookups. Assisted actions (note, cancellation, refund, fulfilment, tracking) stay off until you turn them on one by one. An authorized person, other than the one who proposed it, approves each action, and every refund requires human approval within limits checked by doue. Access remains limited to authorized sources and permissions.
Factual claims must be supported by an authorized source.
Sensitive, ambiguous, or under-documented cases are transferred.
Detailed runs and steps are retained for a limited period.
Roles and permissions limit access to conversations and settings. An administrator organizes access; advanced routing features depend on the plan.
Viewing reports requires the relevant permissions. Audit logs are a separate feature, depending on plan and covered events; they do not mean every action is retained indefinitely.
Security and trust
Email security@doue.ai with reproduction steps, estimated impact, and a way to reach you. Do not access another person’s data, disrupt the service, or attach real secrets. Acknowledgement does not promise a reward.