Protected passwords
Passwords are stored as secure Argon2id hashes, never in plain text. Short and commonly used passwords are rejected.
Home / Security
Security and data protection
How Peety protects your store, your team and your customers.
Sign-in protection
Repeated failed sign-ins trigger a cool-off period, and error messages never reveal which part was wrong.
Session controls
Secure, HttpOnly session cookies with automatic expiry. You can see your active sessions and sign out of all of them.
Re-authentication for sensitive actions
Changing payout details, approving some refunds and similar actions ask you to confirm your password again.
Role-based access
Give each team member only the permissions they need across inventory, orders, customers, campaigns, wallet and settings.
Separate data per store
Every store's data is kept separate, and each user can only reach the stores they belong to.
API keys you control
Partner API keys are scoped, revocable and rate limited. Only a hash is stored and the key is shown once when you create it.
Signed webhooks
Webhooks sent to your systems are signed so you can verify they came from Peety, and only public HTTPS addresses are allowed.
Encrypted credentials and files
Connections use HTTPS. Stored credentials such as WhatsApp and payment keys are encrypted, and sensitive documents sit in private storage with short-lived links.
Card data stays with the payment provider
Card payments are completed on the payment provider's secure page. Peety does not store full card numbers.
Safe messaging
Opt-outs are honoured, campaigns pass pre-send checks, and customer message rate limits and language moderation protect your number and team.
Audit trail
Administrative actions on the platform are logged with who, what and when, with secrets redacted from the logs.
Your data, your control
Privacy built into how Peety works
You decide how customer data is used for your store. We process it only to provide the service.
- Prices, discounts and totals come from your catalogue, never from the AI
- Customers can opt out of offers with one tap on "Stop offers"
- Data deletion on request, in line with the UAE data protection law
- Automated security scanning and controlled releases with health checks and rollback
Security
Roles5custom
Active sessions3live
Alerts0today
FAQ
Security questions
Does Peety store my customers' card numbers?
No. Card payments are completed on the payment provider's secure page, and Peety does not store full card numbers.
How are passwords protected?
Passwords are hashed with Argon2id. Peety never stores them in plain text, and repeated failed sign-ins trigger a cool-off.
Can I control what my staff can do?
Yes. Create custom roles with granular permissions, so each person only sees and does what they need.
How do I delete my data?
Send us a request through our contact page. We aim to complete verified requests within 30 days, and removal from backups can take up to an additional 60 days.
Questions about security?
Talk to our team about how Peety protects your store and your customers.