Security.Read-only, always.
Hawkeyed reads your store to give you answers, and does nothing else with it. Here's how it's kept that way.
Read-only access
Hawkeyed asks BigCommerce for read-only scopes. It can't change products, orders, customers or settings. The one thing it creates is the set of webhooks that tell it when something changes; its code refuses every other write.
BigCommerce is the login
There's no Hawkeyed password to steal. People get in through your BigCommerce control panel, and every request checks they still have access to your store.
Each store kept apart
Every query is limited to one store's rows by the database itself, with separate read-only database users for the app and for Kestrel.
Encrypted throughout
Your store's access token is encrypted before it's stored, and every connection between BigCommerce, Hawkeyed and its databases uses TLS.
Guardrails on Kestrel
Kestrel can only run read-only queries, on your store's data, within time and size limits. Anything that tries to step outside is refused.
Uninstall deletes it all
Remove the app and Hawkeyed deletes its copy of your store, your dashboards, chats, reports and memories. Remove a person in BigCommerce and their access ends.
Your data is yours.Not a training set.
Hawkeyed uses your store's data to show it to you and your team, and for nothing else: no selling, no sharing with other stores, no training AI models on it. When you leave, it's deleted.
Security, answered.
Where is my data stored?
Who at Hawkeyed can see my data?
Which AI provider sees my questions?
How do I remove my data?
Read-only. Deletable. Yours.
- Your whole order history, imported in minutes
- Six dashboards ready the moment it's done
- Read-only: nothing in your store changes