A checkout is a promise. Here's how we keep it.
Four surfaces we defend: your money, your checkout's integrity, your data, and access to it all. Written plainly — no badge wall, just what actually runs.
Money
Direct settlement
Payments run through your own gateway accounts. IndiSell never holds, routes or touches merchant funds.
No card data
Card entry happens on your gateway's PCI-compliant surfaces — full card numbers and CVVs never reach our systems.
Idempotent refunds
Refunds are gateway-verified and idempotent — a double-click can't pay out twice.
Checkout integrity
Server-side pricing
Carts are re-priced on the server from your Shopify draft order. A tampered browser can request, never decide, what gets charged.
OTP abuse controls
Per-phone rate caps and cooldowns stop OTP flooding and SMS-bombing at the platform layer.
Signed links
Cart-resume and preview links are cryptographically signed — they open the intended cart and nothing else, and never leak saved addresses to strangers.
Data
Encrypted credentials
Gateway and messaging keys you connect are stored encrypted and used only to operate your checkout — never displayed back in full.
Hashed ad identity
Conversion uploads carry email/phone only as irreversible hashes — match rates without exposing raw identity.
Tenant isolation
Every store's data is scoped to its tenant across the API — one merchant can never read another's orders or settings.
Access
Role-based dashboard
Owner, manager, staff and viewer roles enforced on every page and API — access matches responsibility.
Audit log
Settings, coupons, gateways — every change records who and when, so reviews take minutes not forensics.
TLS everywhere
All traffic — shopper, dashboard and server-to-server — travels encrypted in transit.
Found something?
We take reports seriously and respond fast. If you believe you've found a security issue in IndiSell, write to hello@indisell.io with steps to reproduce — please don't access other people's data while testing.
Redefine your checkout.
See it live on your own store — a private preview link runs the real checkout for you before a single shopper sees it.