Security

ShopAI uses HTTPS and key-based API access. Developers should still design their own applications so API keys and user data stay protected.

Best Practices

Store API keys in server-side environment variables or secret managers.
Never expose API keys in frontend JavaScript, mobile binaries or public repositories.
Rotate keys if they may have been copied, logged or shared.
Use request timeouts, retries with backoff and logging of request IDs.
Do not send sensitive personal data unless your use case, provider terms and applicable law allow it.

Report A Security Issue

Email support@ishoppers.tech with a clear description, affected endpoint and reproduction details. Do not include active secret keys in the message.