Security

Our approach

Each store’s information is kept separate. Access to store tools is limited to authorized staff. Product pages are intended for shoppers who scan a code in store. Related policies: Privacy and Terms.

Access

Store tools are available to invited accounts. Keep credentials with people who should operate that store. We may suspend an account that appears to be misused.

Product codes

A printed code is a public link to that product. Anyone who can see the print can open the page - that is the point of a shelf code. A store can turn a code or a product off. An inactive code does not start a conversation.

Product materials

Do not put secrets in product materials you would not show a shopper standing at the shelf.

If something goes wrong

If we learn of a security incident that affects your store, we will notify the contacts we have on file as required by law.

Report a concern

If you believe you have found a vulnerability, email hello@voaize.com with a description and the affected page. Please include “Security” in the subject and give us a reasonable window before public disclosure.

Do not test on stores you do not own. Do not attempt to disrupt the service or to obtain access you were not given. Good-faith research on your own store is welcome.