Security at Orvexa Cloud
How we protect your store, your customers and their payments.
Short answer. Every Orvexa Cloud store keeps its customers and orders in its own database, and card and UPI details are entered in Razorpay's PCI DSS compliant checkout, so they never reach us.
How does Orvexa Cloud protect store and customer data?
A database for every store Live
Your customers and orders sit in their own database, never in tables shared with other merchants.
Payment details never reach us Live
Card, UPI and bank details are entered in Razorpay’s PCI DSS compliant checkout. We store only a subscription reference.
Every payment event is verified Live
We check the cryptographic signature on each Razorpay callback and webhook before changing anything, and ignore replays.
HTTPS on every store Live
Free SSL that renews automatically on your subdomain and your custom domain.
Privacy documents, published Live
GDPR, India DPDP Act and EU AI Act documents, plus a data-request form, are open to read in our trust centre.
Two-step login and admin audit log Coming soon
Extra protection for store admins, with a record of who changed what.
Who is responsible for security?
Security, access and risk are led by co-founder Harshni Couppoussamy, who previously secured enterprise customer-record platforms at Accenture. See About.
Where are the privacy and data documents?
Read our Privacy Policy, Terms of Service and Refunds policy. To exercise your data rights or raise a grievance, use the contacts in the Privacy Policy.
Questions people ask
What does a dedicated database per store mean?
Every store runs on its own database schema instead of sharing tables with other merchants. Your customers and orders are separated from everyone else’s, which reduces cross-tenant risk and makes data export and deletion requests straightforward.
Is my payment information safe?
Yes. Card, UPI and bank details are entered in Razorpay’s PCI DSS compliant checkout, so they never reach or get stored on Orvexa’s servers. We keep only a subscription reference, and we verify the cryptographic signature on every payment event before acting on it.
How secure is my store’s data?
Every store runs on its own dedicated database, is served over HTTPS with automatically renewing SSL, and follows the same security baseline on every plan. Security is not a paid add-on. Our GDPR, India DPDP Act and EU AI Act documents are published in the trust centre.
Will I lose my data or my Google rankings when I switch?
No. Your products with photos and variants, your customers and your order history are moved across, and we set up redirects from your old product and collection links to the new ones so search rankings and shared links keep working. Your data lives in your store’s own dedicated database.