1.Purpose and scope
This policy describes how Shefa Digital addresses fraud and abuse risk on the Shefy platform, and clarifies the division of responsibility between Shefa Digital (platform-level controls) and Shefy's regulated payment service provider (payment-level fraud and risk controls, for any payment functionality offered through the platform).
2.Platform-level controls (Shefa Digital)
Shefa Digital applies the following controls at the platform level:
- Account authentication (password plus optional two-factor authentication).
- Strict tenant isolation — every business's data is separated from every other business's data, enforced server-side on every request.
- Access controls on every account and data operation, validated against the authenticated caller's own account.
- Rate limiting on sensitive endpoints (such as login, registration, and password reset) to reduce automated abuse.
- Review of unusual account activity that comes to our attention, for example through user reports or clearly suspicious registration patterns.
- Logging of key account and security events, to support investigation where needed.
- The ability to suspend or restrict an account suspected of fraudulent or abusive use of the platform.
3.Payment-level controls (our payment service provider)
Shefa Digital does not itself acquire card transactions, and does not operate card transaction risk screening, chargeback management, or payment fraud monitoring systems. Where Shefy offers payment collection functionality, those controls, together with merchant know-your-business (KYB) and onboarding checks for that functionality, are performed directly by Shefy's regulated payment service provider (e.g. OPP / Worldline), not by Shefa Digital.
4.Reporting and escalation
Users can report suspected fraud or abuse to contact@shefyone.com. Reports are reviewed directly by Shefa Digital's owner/operator.
5.Evidence preservation
Where reasonably practicable, Shefa Digital preserves the account and activity logs relevant to a suspected fraud or abuse incident, for the purpose of investigation and, where applicable, cooperation with our payment service provider or the relevant authorities.
6.Cooperation
Shefa Digital cooperates with its payment service provider and, where legally required, with law enforcement or regulatory authorities, in connection with suspected fraud.
7.Consequences
An account found to be used for fraudulent or abusive purposes may be suspended or terminated, in accordance with our Terms of Service.
8.Review and updates
This policy is reviewed periodically and updated as the business or its risk profile evolves.
9.Contact
Questions about this policy can be sent to contact@shefyone.com.