Cloudshelf only accesses product information that is already public on your website, and does so in read-only mode, so there is no risk to your data, your customers or your payments.
No customer data, so no GDPR issues
What Cloudshelf shows depends on where the screen is, not who is using it. So Cloudshelf has no need to access your customer data, and there is no risk of leaking it.
When a customer wants to buy a product, we instruct Shopify to create a basket using your existing Shopify customer and payment infrastructure. The customer enters their details on a page of your website, which stores them in your existing systems. Cloudshelf has no visibility of this data, and only knows that a transaction was offered.
No write access, so no risk to your website
Cloudshelf presents the data you have already entered on your website. All customisation of this data for Cloudshelves is done on our own infrastructure, so we don't need write access to your Shopify website. With no write access, there is no way for us to damage your website or data.
No payment handling, so no extra risk of fraud
Shoppers using Cloudshelf pay through your existing payment gateway and providers, exactly as they would buying on your website. So there is no additional payment risk.
In due course we may introduce features that need some customer data or write access. We will discuss this with you before doing so.