Where your keys live, and who can read them.
Storelift asks for App Store Connect, Google Play, RevenueCat and Apple Ads keys. This page says exactly what happens to each one, where your data is stored, who in your team can change what, and what deleting your account removes.
How are my App Store Connect and RevenueCat keys kept?
Connection keys are encrypted before storage. Services need separate decrypt permission; the dashboard does not display saved keys.
- Encrypted before the database sees them
Each key is sealed with an AWS KMS key before it is written. Opening a key takes a separate decrypt permission on top of table access.
- New keys are bound to your account
The encryption context includes your account when a connection key is newly saved. Older records may still use the previous context until saved again; completion of that migration has not been verified.
- Separate write and decrypt permissions
The API encrypts saved credentials. Authorized collection services decrypt them to read connected reports, including the collector and current-day report reader.
- Tried once, live, on connect
Before a key is saved it is tried against its source. A missing role is named on the card right away.
- Sealed after saving
Screens, exports and API responses show that a key is connected; the key itself stays sealed. To change one you replace it.
- Gone when you remove it
Removing a connection deletes its stored credentials and associated webhook or sheet access record. Revoke the original key in the provider console too. Previously collected reports are separate from the connection.
Where is my data stored, and who else processes it?
Account storage is on AWS in the EU. Processing and delivery depend on the features and destinations you use; external providers may process data elsewhere.
- Account data
- AWS, Frankfurt (eu-central-1): database, sign-in, the API and the collector. Continuous point-in-time backups; KMS key rotation on
- AWS SES, Stockholm (eu-north-1): sign-in codes, alerts, reports and account emails
- Payments
- Polar, merchant of record. Card details go straight to Polar and stay there
- Sign-in with Google
- Google, only if you choose it
- AI features
- Anthropic receives the context required for questions, review drafts and text suggestions. AI visibility can also call OpenAI and Google Gemini. Sent content can include store details, keywords, review text and your question; personal information you put in a question is part of that content.
- Public site analytics
- Microsoft Clarity, on public pages only and only after your first click or key press
- Destinations you connect
- Slack, Telegram, Discord, Google Sheets and your webhook destination receive the reports or events enabled for that connection. Data exported to a destination is also subject to its retention settings.
Who in my team can change what?
Four roles, checked on the server for every request — the server holds the lock, not the button.
- Viewer
Reads every screen in the workspace and asks Storelift AI; changes stay with the roles below.
- Member
Also works inside existing apps: keywords, countries, rivals, drafts and localisation.
- Admin
Also adds and removes apps, connects data sources, alert channels and API keys, and sees revenue and ad spend.
- Owner
Also invites and removes seats, and holds the plan, billing and the account itself.
- Audit log
Recorded workspace changes carry who made them (account and email), when, from which IP address and what was done, with a 365-day retention setting. An email address inside the change itself, such as an invited one, is masked. Owners and admins can read the log.
- API keys
Stored only as a SHA-256 hash and shown once. Each key has its own scope, and a new key starts with every write scope unchecked. Test keys work against a sandbox dataset on every plan.
What happens when I ask to delete my account?
Email us from your account's address and we delete the account within 30 days. Deletion removes account and app records from the primary database.
- Request
- Email hello@storelift.net from the address on your account. We verify that the request came from that address.
- Before deletion
- An active subscription is ended first, so billing stops. A cancelled subscription is not automatically restarted.
- Within 30 days
- We delete the account: account and app history, reviews, drafts and connections are cleaned up, and removal of sign-in records is requested.
- After
- A minimal deleted-account marker has a further 30-day expiry setting; expiry processing is asynchronous. Backups expire under their retention policy. Anonymous totals and provider-held records, including Polar payment records, are separate.
Trust also means the figures on screen
Three rules every screen follows, because the figure on screen is the one you act on.
- A source on every figure
Downloads from Apple's Sales report say so; every other figure names Hive and the day it was measured.
- Every point is a measured day
An unmeasured day stays a gap on every chart.
- Your own figures come from your keys
Revenue, downloads and conversion appear only after you connect the account they belong to; ranks and rivals need only the store link.
FAQ
Questions
Do you sell or share my data?
We do not sell account data. Providers process the content needed for the features you use; connected delivery destinations receive the reports or events you enable.
Is my data used to train AI models?
Anthropic’s commercial API and OpenAI’s API exclude training by default unless the customer opts in. Gemini distinguishes paid and unpaid service terms. Provider retention is separate from training; ask us about the configuration of a particular feature before sending sensitive content.
Can Storelift staff see my App Store Connect key?
Saved keys are not returned to dashboard screens. Decrypting encrypted keys requires separate KMS permission, held by authorized collection services. Newly saved keys use an account-specific context; older records may still use the previous context. Privileged infrastructure access is not technically impossible.
Does Storelift change anything in my App Store Connect or Apple Ads account?
What you confirm: a review reply you send, listing text you send to an editable version after a preview (it waits there as a draft; submitting to App Review stays with you), or an Apple Ads change you press apply on or set a rule for.
How do I exercise my GDPR or KVKK rights?
Write to hello@storelift.net for access, correction, deletion, objection or portability. For deletion, write from the address on your account.
How do I report a security issue?
Email hello@storelift.net with the details. The same address is in /.well-known/security.txt.
Start with the store link.
Ranks, rivals and reviews need only the store link. Add a key when a screen asks for it — and you know where it goes.