🛡️ Security Protocol

Security Incident Response Policy

Klyx Store Backup by KLYX — Data Breach Response & Security Commitments

← Back to app page
Effective Date: September 2026

At KLYX, security is paramount. The Security Incident Response Policy outlines our strict protocol for detecting, investigating, mitigating, and reporting any potential security incident or data breach affecting the Klyx Store Backup Shopify application.

1. Incident Response Protocol

  1. Investigation Commitment: If a data breach or unauthorized access is detected, we will initiate a thorough investigation within 24 hours.
  2. Merchant Notification: Affected merchants will be notified by email within 72 hours of confirmed breach discovery.
  3. Shopify Partner Notification: Shopify will be notified via the Partner Dashboard within 72 hours of confirmed breach discovery.
  4. Credential Rotation: Compromised credentials (including access tokens, API keys, and encryption keys) will be rotated immediately upon detection.
  5. Post-Incident Review: A complete post-incident review will be conducted and documented within 7 days.

2. Merchant & Shopify Notification

In the event of a verified security incident involving merchant store data:

  • Notification Channel: Primary notifications will be sent directly to the merchant's registered store contact email address.
  • Transparency: Notifications will detail the nature of the incident, affected data types, mitigation steps taken, and actions required by the merchant (if any).
  • Partner Portal Escalation: Official incident logs will be submitted to the Shopify Partner Security team via the Partner Dashboard portal.

3. Remediation & Credential Rotation

To contain any potential compromise:

  • Token Invalidation: All active Shopify OAuth access tokens and database access credentials for affected stores are revoked and re-authenticated.
  • Database Encryption Key Rotation: AES-256 encryption keys protecting stored data at rest are updated and database snapshots re-encrypted.
  • Patch Deployment: Emergency security patches are deployed to serverless backend endpoints within 24 hours of vulnerability identification.

4. Security Contact Information

If you suspect a vulnerability or security issue with Klyx Store Backup, please contact our dedicated security team immediately:

  • Security Email: contact@klyx.agency
  • Support Phone: +91-8279555123
  • Developer: KLYX Agency — klyx.agency
  • Official Address: Durga Vihar, Lane no 4, Vikasnagar, Dehradun - 248198, Uttarakhand, India