Security at Bijago

Bijago is an ecommerce platform that helps merchants build and run their online stores. Protecting the data merchants and their customers trust us with is a core responsibility, not an afterthought.

Our commitment

Bijago maintains a published information security policy covering access control, data handling, third-party data sharing, and incident response. It is reviewed at least annually and is available in full detail to our partners on request.

• SSH key-only authentication for server access — password login is disabled.
• Two-factor authentication on the accounts used to manage our hosting, source control, and payment infrastructure.
• A network-level firewall restricting server access to only the ports required to serve the platform, blocking direct access to the database and other internal services from the public internet.
• Per-tenant data isolation at the application and database level, so one merchant's data is never accessible to another.

• Payment processing is handled by Stripe, a certified PCI DSS Level 1 service provider. Bijago does not store raw card numbers.
• All traffic to and from Bijago is encrypted in transit via HTTPS/TLS.
• Access tokens for connected third-party services (such as Google and Meta) are encrypted at rest (AES-256-GCM) and only decrypted server-side, at the point of use.

• Stripe — payment and subscription processing.
• Sales channel integrations (Meta, TikTok Shop, Amazon, Google Merchant Center) — only for merchants who connect that specific channel.
• Our AI content provider — for optional AI-assisted product and content suggestions.
• Klaviyo — for merchants who enable email marketing features.

Incident response

Suspected security incidents can be reported to security@bijago.com. Reported incidents are investigated promptly, and affected merchants are notified without undue delay, and in any case within 72 hours of confirming a breach affecting their data.

Policy review

This policy is reviewed at least annually, and whenever our infrastructure or data handling practices meaningfully change, to make sure it continues to reflect our actual practices.

Vulnerability reports

If you believe you have found a security vulnerability in Bijago, please report it to security@bijago.com. We ask that you give us a reasonable opportunity to investigate and address a report before disclosing it publicly.

Changes

We may update this Security page periodically to reflect changes to our practices. We will post any changes on this page.

Contact us

Bijago LLC
610 E Zack St Ste 110-2177
Tampa, FL 33602
United States
security@bijago.com