We store store, product, order, customer data isolated by storeId. Razorpay secrets encrypted at rest. No Stripe. Email only for order receipts if you set RESEND_API_KEY.