Authorization instead of passwords
BrandMilo is designed not to collect Etsy, Pinterest, Facebook, Instagram, or TikTok passwords. Users authorize access on the provider’s own website when an integration is enabled.
Security
Security for connected commerce and social accounts
BrandMilo is designed to use official authorization flows, encrypted credentials, least-privilege access, and visible user controls.
Token protection
OAuth access and refresh tokens are designed to be encrypted at rest. Encryption keys are separated from application data and rotated according to the production security plan once auth/integrations ship.
Least privilege
The application requests only the scopes needed for enabled features and documents why each permission is used.
Secure transport
Production traffic will use HTTPS. Secure cookies, CSRF protections, and strict redirect URI matching are applied as appropriate when auth and domains are attached.
Tenant isolation
Every API request and background job is designed to validate workspace ownership. Sensitive records must not be returned through normal list endpoints.
Logging and monitoring
Tokens, passwords, secrets, and authorization codes must be removed from logs. The service will monitor authentication failures, queue delays, publishing errors, and unusual activity when those subsystems are live.
Media security
Remote media fetching is designed to be protected against server-side request forgery, unsafe redirects, excessive file size, invalid content types, and private-network targets.
Data control
Users will be able to disconnect integrations, export available data, and request deletion. Until in-app controls ship, deletion requests are accepted via the public Data Deletion page and privacy@brandmilo.com.
Responsible disclosure
Security researchers may report vulnerabilities to security@brandmilo.com. Include a clear description, reproduction steps, impact, and any supporting evidence. Do not access data that does not belong to you, disrupt the service, or publicly disclose an issue before a reasonable remediation period.