EZ‑Praxis LLC · Grace

How Grace protects your store’s data

A plain‑language summary of what we do with the calls, customers, employees and orders that pass through Grace, and how they are kept safe. Every statement below is true as of October 10, 2026.

The short version

Your store’s data is yours. It is stored separately from every other store, and we never show one store’s numbers to another store, to a franchisor, or in our own marketing. No case studies, no benchmarks, no testimonials built on your figures.
We never see or store a customer’s card number. Card payments happen on Stripe’s secure page.
Everything travels encrypted, logins use one‑time codes, and the database is backed up every day.
Call recording follows a consent chain you control: your agreement, your employees’ signed acknowledgment, and customer notice.

What we do, item by item

Where your data lives: ✓Servers in the United States (New York), on an up‑to‑date Linux system that installs security updates automatically.
One store, one set of data: ✓Every record is tied to a single store number. A store owner, manager or employee can only ever see their own store. The admin team at EZ‑Praxis uses separate, logged access.
Encryption in transit: ✓All Grace pages and apps are HTTPS only. Plain HTTP is redirected, old protocols (TLS 1.0 / 1.1) are switched off, and certificates renew automatically.Applies to try‑grace.com, the owner app, the employee app and every customer page.
Network: ✓A firewall allows only web traffic. The database is not reachable from the internet at all.
Logging in: ✓Owners and staff sign in with a one‑time code sent to their email or phone; codes expire in 10 minutes. Sessions expire, and the owner app can be locked on the phone.
Card payments: ✓Customers enter card details on a page hosted by Stripe, a PCI Level 1 provider. Grace receives only the result of the payment. No card numbers are ever typed into, sent through or stored by Grace.This places Grace in the lightest PCI category (SAQ A).
Call recordings: ✓Calls are recorded, transcribed and scored to coach your team. Sensitive details in a recording can be redacted. We do not build voiceprints or any biometric profile of callers or employees.
Consent: ✓Recording consent is built into the Grace Services Agreement, each employee signs a Call Recording & Monitoring Acknowledgment in the HR Console, and customers are notified on the call.
Backups: ✓The database is backed up automatically every day and the last 14 days are kept, so a mistake or a failure can be rolled back.
Your customers’ privacy: ✓Shoppers who order printing through your store get their own terms and privacy notice. Their information is used to fulfil their order and to send the follow‑ups you choose. It is not sold.
Messages and email: ✓Texts and emails go out in your store’s name through established, compliant US messaging providers, with opt‑out honored automatically.
Leaving Grace: ✓Your data stays yours. On request we export it and remove your store from our systems.

What we do not claim

Grace does not currently hold a third‑party certification such as SOC 2. We have not been audited by an outside firm, and we will say so if you ask. Grace does not handle protected health information and makes no HIPAA claims.

If your organization requires a SOC 2 report, tell us. We will pursue it when a partner of that size needs it.

Questions

Ask us anything about this page before you sign. Reach the EZ‑Praxis team through try‑grace.com and we will answer in writing.

Published by EZ‑Praxis LLC. Grace is an independent product and is not affiliated with, endorsed by or sponsored by any shipping or printing franchise. Version 2026‑10‑10.