Least-privilege secrets
Keep Apple keys, tokens and operational credentials server-side with narrow access and no chat exposure.
RefundWarden is designed around least-privilege credentials, server-local secrets, staging-first verification, production controls and audit-ready refund decision records.
Trust
RefundWarden is designed around least-privilege credentials, server-local secrets, staging-first verification, production controls and audit-ready refund decision records.
Keep Apple keys, tokens and operational credentials server-side with narrow access and no chat exposure.
Collect only the context needed to operate refund response workflows and support clear retention rules.
Preserve event timing, policy choice, owner, response status and outcome without over-collecting user data.