What Emdepo can touch in your store, and how.
Read this before you grant write access. It says what Emdepo reads, what it can change, how a change reaches your store, and what leaves it.
- Approval before every change
- Undo for 24 hours
- No customer records
What Emdepo can access
The access Emdepo asks Shopify for, in plain words. You see the same list on Shopify's install screen before you approve it.
| Data | What Emdepo does with it | Access |
|---|---|---|
| Products | Reads titles, descriptions, images and alt text. Writes only the changes you approve. | Read and write |
| Inventory | Reads available quantities, to find active products at or below zero. | Read |
| Orders | Reads orders for analysis, counted per product over a window. | Read |
Emdepo does not read customer records.
It does not ask Shopify for customer names, emails or addresses. The access it asks for beyond the three rows above: To be confirmed before launch.
How changes reach your store
Five steps, the same for every change. Nothing skips one.
- 01 · PreviewEvery change is prepared as an action. You see the current and the proposed version side by side.
- 02 · ApprovalNothing is written to your store until you approve the action.
- 03 · VerificationAfter writing, Emdepo reads the product back from Shopify and checks that it matches what you approved.
- 04 · 24-hour undoEvery published change can be undone for 24 hours. Emdepo keeps what was there before.
- 05 · Audit logEach approval, write and undo is recorded with who did it and when.



Workspace isolation
Your store, your members and your runs live in one workspace.
- SeparationData is separated per workspace. A member of one workspace cannot see another workspace.
- Store credentialsThe credentials Shopify issues to Emdepo for your store are encrypted at rest.
AI and your data
What leaves Emdepo for an AI provider, and what never does. You never choose a model.
- Product photos
- Product text
- Customer data
You never choose a model. Emdepo decides which provider handles each task, and the list of providers is published here before launch.
| Provider | Purpose | Data sent | Region |
|---|---|---|---|
| To be confirmed before launch | AI provider, images | To be confirmed before launch | To be confirmed before launch |
| To be confirmed before launch | AI provider, text | To be confirmed before launch | To be confirmed before launch |
| To be confirmed before launch | Hosting and database | To be confirmed before launch | To be confirmed before launch |
| To be confirmed before launch | Email delivery | To be confirmed before launch | To be confirmed before launch |
Where data lives and for how long
Regions and retention periods are published here before launch.
- RegionTo be confirmed before launch.
- Photos and outputsKept in your workspace. Retention period to be confirmed before launch.
- Undo copiesWhat was in your store before a change is kept for the 24-hour undo window.
- Order historyTo be confirmed before launch.
- After you uninstallDeletion schedule to be confirmed before launch.
Reporting a security issue
Write to security@emdepo.com with what you found and the steps to reproduce it.
Please do not test against stores that are not your own.
Give it a few photos. Keep the last word.
Join the waitlist. We write when your workspace is ready.
Email only. No store address needed.