Data security at a glance

Bulutegra works with some of your most sensitive business data: orders, stock and prices. This article summarises the main points; the full details are on the Security, access and data protection page.

Access to the panel

• Two-step verification: a password alone doesn't open the panel. A leaked password, on its own, doesn't give anyone access to your account.
• Personal accounts and roles: everyone signs in with their own account and sees only their own area, according to their role. The Warehouse role, for example, doesn't see the profitability and settlement screens.
• Passwords: passwords are never stored in plain text and are hashed so they can't be reversed. Repeated failed sign-ins trigger a lock. Password reset links are signed and time-limited.
• Connection: the website and the panel only run over an encrypted connection (HTTPS).

Your channel and ERP keys

• Keys are generated on your behalf, belong to your account, and are used only on your behalf.
• Only users with the Admin role can see and update keys, on the Settings → API Credentials (Ayarlar → API Kimlikleri) screen; other roles don't see this screen.
• On Etsy and eBay the connection is made with a one-click authorisation. If you want to stop working with any channel, simply withdraw the authorisation in your own channel account; the connection stops at that moment.
• We state plainly on the security page how credentials are stored, what we do and what we don't do.

Designed to prevent wrong writes

• Shadow mode: during setup the system only reads at first. Write access is switched on only after you approve, one channel at a time.
• Ownership flag: for every product and channel it's clear who manages that product. If ownership sits with an external system, Bulutegra reads that field but doesn't write it.
• Mass-reset brake: a send that would set an unusual number of products to zero at once is stopped, and an alert is raised.
• Preview and approval: operations you start by hand show a preview first on the Operations (İşlemler) page; nothing is written until you approve.

Backups

Databases are backed up automatically and copied to a second, separate location. Losing a single machine doesn't mean losing your data.

Personal data (KVKK)

Bulutegra processes only the data the job requires: order records, product records, and the customer contact details needed to ship an order. There is one purpose: taking the order from the channel and writing it into your ERP, keeping stock and prices right, and letting you follow returns and settlements. This data isn't used for marketing and isn't sold.

You can send requests to delete, correct or export data to destek@bulutegra.com.

On your side

1. Create a separate user for every employee; don't share accounts.
2. Give roles that match the actual job; don't hand out the Admin role unless needed.
3. Delete a departing employee's user on the day they leave.
4. Keep your backup codes somewhere safe.
5. Never type API keys or passwords as plain text into an e-mail or a chat.
6. If you spot a security weakness, write to destek@bulutegra.com.