A sua segurança, os seus dados O seu negócio
Levamos a segurança a sério. Eis exatamente como protegemos você, os seus clientes e os seus ganhos, com total transparência.
Ainda não tem a certeza?
The short version
The rest of this page has the detail. If you only read three things, read these.
Where does my money go?
Straight into your own Stripe account. We never hold it, and we are not sitting in the middle of your payouts.
Is my customers' card data safe?
Card numbers never touch our servers. Stripe collects them on its own certified systems and runs the fraud checks.
Who owns my customer list?
You do. Export your customers, orders, and data any time. Nothing here locks you in.
It goes to you, not through us
When someone buys from you, the payment goes straight into your own Stripe account. We never hold your cash and we are not a middleman skimming from the flow. You are the merchant of record, so the funds, the payout schedule, and the customer are yours.
Card numbers never touch our servers. Stripe collects them on its own certified systems, screens each payment with Stripe Radar to catch fraud, and pays out to your bank on the schedule you choose.
Mais de 11 métodos de pagamento suportados
Verificado pelo Stripe
Protected, and still yours
The people who buy from you trust you with their details. Here is how we keep that trust from becoming your problem.
Encrypted on the way
Everything between your customers and PersonaCart travels over TLS 1.2 or higher. Checkout, logins, customer details, all of it, encrypted end to end.
Kept apart
Each creator's data sits in its own isolated space. One store can never see another store's customers or orders, no matter what.
Backed up daily
The database is backed up every day to encrypted storage, so a bad day on our side never turns into lost data on yours.
Never sold
We do not sell your data or your customers' data to anyone. We collect the minimum we need to run your store, and we anonymise IP addresses.
Locking the front door
Most break-ins are not clever hacks, they are a guessed password. So the controls that matter most are the ones that stop that.
Two-factor login
Turn on TOTP or email OTP so a stolen password on its own is not enough to get into your account.
Standard sign-in
Logins run through OAuth 2.0, the same flow used by the apps you already trust every day.
Team roles
Adding a helper or a VA? Give them exactly the access they need and nothing more with role-based permissions.
A clear trail
Every important action is logged with a timestamp and the person behind it, so you can always see what changed and when.
Você é Dono de Tudo
O seu conteúdo, os seus clientes, o seu negócio, nós apenas fornecemos a plataforma
O Seu Conteúdo
Every course, download, and file you upload stays yours. We never claim rights to your work, and you can edit or remove any of it whenever you like.
A Sua Lista de Clientes
Your customers are yours, not ours. Export the whole list in one click with emails, purchase history, and engagement, no lock-in.
A Sua Receita
Money lands in your own Stripe account. We take a small platform fee and nothing else, no surprise deductions buried in the fine print.
Os Seus Dados
Products, customers, orders, analytics, export all of it any time. You are never trapped here because you cannot leave with your data.
A Sua Marca
Bring your own domain and your own logo. Customers see your store, not ours, so the brand equity you build stays with you.
A Sua Relação
We run the platform, we do not stand between you and your audience. Talk to your customers directly, on your terms.
What we align with
These are self-declared from how the platform is built and run. They are checked internally, and we are happy to walk through any of them on request.
Everything in transit is encrypted, nothing is sent in the clear.
Card data is handled by Stripe, not by us.
Consent, erasure, and data portability for EU customers.
Access, deletion, and opt-out rights for US state residents.
We build against the common web vulnerability checklist.
Standard, well-tested sign-in flows.
TOTP or email OTP on any account that wants it.
Give teammates only the access they need.
Minimal data, anonymised IPs, and we never sell it.
One store can never read another store's data.
Every important action is recorded with who and when.
The database is backed up daily to encrypted storage.
Want to check any of this for yourself? Contact us and we will share what we can.
Infraestrutura e Fiabilidade
PersonaCart runs on managed cloud infrastructure with redundancy built in, so a sale can happen at 3am while you sleep and while a server somewhere reboots.
99,9% de Disponibilidade
Redundant systems with automatic failover keep your store up. There is no single machine whose bad day takes you offline.
Cópias de Segurança Diárias
Your data is copied every day to more than one secure location, with point-in-time recovery if something ever goes wrong.
CDN Global
Your storefront is served from edge locations around the world, so pages load fast whether a buyer is in Tokyo, London, or New York.
Monitorização 24/7
Automated alerts watch the systems day and night, so most issues are caught and fixed before they ever reach your customers.
Práticas SOC 2
We build to SOC 2 security practices for how data is stored, accessed, and handled across the platform.
Auditorias Regulares
Security practices are reviewed and tightened on a regular basis as new risks show up, rather than set once and forgotten.
Still have a security question?
Ask it directly. A product specialist will walk you through exactly how any of this works for your store.
Found a bug? Tell us first
If you spot a security hole, please send it to [email protected] before you post it anywhere public. We aim to reply within 48 hours and to fix critical issues within 30 days. Researchers who help us keep creators safe get our genuine thanks.
Please give us the chance to fix it before you share it publicly.
PRONTO PARA CONSTRUIR?
Junte-se aos criadores a vender na PersonaCart. Comece o seu teste gratuito de 14 dias hoje.