Starship
starship / search / eber

Audit report

Eber ‑ Smart Member Solution

Broad accessReach : broadSensitive Access

by Eber Pte Ltd · Marketing · Shopify App Store

Marketing
Risk level
Broad access
Executive summary

Member and loyalty solution for online and physical retailers.

Key insights

  • ◆Loyalty / membership platform by Singapore-based Eber Pte Ltd; multi-channel retail focus, 50+ integrations.
  • ◆Only 2 reviews on the Shopify App Store but a 5.0 average; no 'Built for Shopify' badge.
  • ◆Enterprise-tier pricing ($89 to $1,199/month) suggests mid-market and higher merchants.
  • ◆Privacy policy is comprehensive (GDPR + Singapore PDPA, EU rep via Prighter Group, SCCs for cross-border).

Top findings

No critical or high findings detected.
Synthesis

Analysis summary

Member and loyalty solution for online and physical retailers.

Key insights
  • ◆Loyalty / membership platform by Singapore-based Eber Pte Ltd; multi-channel retail focus, 50+ integrations.
  • ◆Only 2 reviews on the Shopify App Store but a 5.0 average; no 'Built for Shopify' badge.
  • ◆Enterprise-tier pricing ($89 to $1,199/month) suggests mid-market and higher merchants.
  • ◆Privacy policy is comprehensive (GDPR + Singapore PDPA, EU rep via Prighter Group, SCCs for cross-border).
  • ◆No publicly reported breaches or CVEs found for Eber or Eber Pte Ltd.
  • ◆Publisher web origin runs on WordPress behind Cloudflare and WP Engine; TLS clean but HSTS and a strict CSP are absent.
  • ◆Privacy policy makes no mention of LLM/AI/ML processing of merchant or customer data.

This section is available to signed-in users

Sign up free to unlock findings, data flow and theme code analysis for every Shopify app.

Get started
Permissions

OAuth scopes requested

These are the access permissions this app asks for during install. The sensitivity column reflects PII exposure and merchant impact.

read_customers
High

Loyalty programs require customer identity and contact data to track membership and rewards.

write_customers
High

Customer tagging, metafields, and loyalty status updates require write access to customer records.

read_orders
High

Order history is needed to calculate points earned and reward eligibility.

read_products
Medium

Product catalog data required to define rewards, gift cards, and product-based earning rules.

write_price_rules
High

Generating discount codes and reward redemptions requires creating Shopify price rules / discount codes.

write_discounts
High

Issuing loyalty discounts and gift cards requires writing discount objects.

This section is available to signed-in users

Sign up free to unlock findings, data flow and theme code analysis for every Shopify app.

Get started

This section is available to signed-in users

Sign up free to unlock findings, data flow and theme code analysis for every Shopify app.

Get started
Attack surface

Network surface

Primary domain
eber.co
TLS grade
A
HSTS
Missing
CSP
Missing

Only 'upgrade-insecure-requests' is set; no source restrictions. No Strict-Transport-Security header. Cloudflare + WP Engine WordPress origin.

Posture

Compliance & certifications

GDPR webhooks Pass
SOC 2 Type II Fail
ISO 27001 Fail
PCI DSS Fail

GDPR-compliant with SCCs for EU transfers and a designated EU representative (Prighter Group). Also compliant with Singapore PDPA. No SOC2/ISO27001/PCI DSS attestations disclosed. IP addresses retained 24 months.

Privacy policy
Track record

Publisher reputation

Publisher
Eber Pte Ltd
Verified Shopify Partner
No
Years active
0
Other apps
0
Past incidents
No past incidents on record.
LLM exposure

AI / LLM usage

No LLM usage detected. This app does not appear to forward any customer or merchant data to large-language-model providers.