Security at Sepal

Your store, safe by design.

No passwords to leak. Money that goes straight to your own Stripe account. Keys that are never shown again. Agents that can’t touch money or access. And a record of every change.

Pictures on this page show an example store’s admin, with sample people and sample activity.

No passwords An emailed code, for owners and staff.
Your Stripe account Money goes to you and your bank. Sepal never holds it.
Keys encrypted Shown once when saved, never again.
Owner-only switches Payment accounts, payouts and staff.
Owner and staff Staff run the store; money and access stay with the owner.
Agents within limits Recorded, and never near money or access.
Every change recorded Activity says who, what and when.
Stores kept apart Your data is seen only from your store.
No passwords

Nothing to leak, nothing to reuse.

Sign in with a one-time code sent to your email. The same goes for your staff, in the admin and on the phone admin.

Your money

Your account. Never ours.

Payments land in your own Stripe account and pay out to your bank in Canadian and US dollars. Sepal never holds your money.

Keys

Shown once. Encrypted ever after.

Owner, staff and agents

The big switches stay with you.

Only the owner changes payment accounts and adds staff. Staff run the store day to day. Agents work within limits, and never on money or access.

Who can OwnerAlex MorganStaffDana Li, supportAgentsWithin limits
Change payment accounts and payoutsOwner onlyNoNever
Add or remove staffOwner onlyNoNever
Switch connections on or offYesYesNever
Create or replace keysYesYesNever
Refund an orderYesYesAsks in Approvals
Change prices and codesYesIf their role allowsWithin limits
See customer names and emailsYesIf their role allowsOnly if allowed
Sample team: Alex Morgan (owner) and Dana Li (staff).
Agents

Limited, recorded, and kept away from money.

Every agent acts for a named person, inside limits the owner sets. Refunds and anything over a limit wait in Approvals. Customer names and emails stay hidden unless you allow them.

How agents work
Activity

Every change, on the record.

Activity says who changed what and when: a person, an agent on behalf of a person, or a connected system. Keys and payment settings are in it too.

Activity is kept for as long as your store is on Sepal.
Visits

Counted by Sepal. A “no” stays a no.

Sepal counts visits itself, without an outside analytics service. When a shopper says no to tracking, the visit is counted only as a number, with nothing else kept about them.

Stores kept apart

Your data is your store’s, and only your store’s.

Each store’s products, orders, customers and keys are kept apart from every other store’s. Your staff, agents and connections only ever see your own store.

Every record carries its store’s id, and every request is limited to one store. Automated tests check this on every change.
The details

Where it runs, and what we’ll confirm in writing.

HostingRailway, in the western United States. Pictures with Cloudflare.
Encryption in transithttps on every page and connection
Encryption at restConnection keys encrypted. Sign-in codes and API keys kept only as fingerprints.
BackupsEvery day, each kept for six days
Card paymentsHandled by Stripe, certified PCI DSS Level 1. Card details never reach Sepal.
CertificationsNone held yet
Privacy policygosepal.com/privacy
Report a problemhello@gosepal.com

Questions about security

More on agents and connections.

Why no passwords?

Passwords get reused and leaked. Signing in with a one-time code by email means there is no Sepal password to steal.

Does Sepal ever hold my money?

No. Payments go to your own Stripe account and out to your bank. Sepal never holds them.

Can staff change where payouts go?

No. Only the owner can change payment accounts and payouts.

What happens to a key after I save it?

It is encrypted and never shown again, to anyone. To change it, you replace it, and that is recorded in Activity.

Can an agent move money or add someone?

No. Agents never change where money goes, add staff, switch on a connection or see a key.

What do you keep about shoppers who decline tracking?

Only that a visit happened, as a number in the count. Nothing else.

Where is my store’s data hosted?

On Railway, in the western United States. Product pictures are stored with Cloudflare.

A platform you can trust with the keys.

Sepal is opening to new stores in small groups. Join the waiting list, and ask us anything about how your store is kept safe.

Join the waiting listSee pricing