Our plugin uses public fields to authenticate with Shopify, make sure you have your privacy rules set accordingly at all times. No-Code Venture is not responsible how you handle your privacy rules.
Kindly look at the image below on how to protect your keys.
When a merchant signs up, the first thing you want to do is to store there access token in your database, make sure you protect these records.
For an additional layer of security, you can use the Symmetric Pro Encrypt & Decrypt plugin.