Security & your data
What a connected assistant can and cannot access
One connection, one company
Each connection is scoped to a single CheckoutJoy company — the one you logged in with when you approved it. The assistant can only ever see and change that company's data. If you run more than one company, each is connected and controlled separately.
It cannot move money
The assistant can manage your catalogue, checkouts and settings and read your reports, but it has no ability to move money. It cannot issue refunds or cancel, pause or change subscriptions. Those actions are only available to you in the dashboard. This limit is built into the connection — it isn't something the assistant can be talked into.
You're always in control
- You approve the connection yourself, with your own CheckoutJoy login.
- You can see every connection under Settings → Connected apps.
- You can revoke a connection at any time, and access stops immediately.
Your login stays with CheckoutJoy
You sign in on a CheckoutJoy page — the assistant never sees your password. The connection uses a token that only works for your company and only for the actions you approved.
Confirmation on bigger changes
For changes that remove or overwrite something (for example deleting a coupon), the assistant will confirm with you before going ahead. See the FAQ for more.