Data Retention Policy

Effective June 12, 2026

This page describes exactly what personal data AIOM collects, how long every category of data is kept, and how deletion works.

Personal data we collect

We request the customer email address only from Shopify orders.
We never request or store customer names, phone numbers, or physical addresses.

Order, refund, fee and payout records (including customer emails) — retained for the life of the merchant's subscription, so profit and reconciliation history stays accurate.
On uninstall — app/uninstalled immediately deactivates the shop, stops syncing and clears integration credentials; it does not delete merchant history. Reinstalling before redaction preserves that history. Ad integrations must be reconnected.
Shop redaction — Shopify normally sends shop/redact about 48 hours after uninstall if the app has not been reinstalled. This is an expected webhook delivery time, not a guaranteed deletion deadline measured from uninstall. We hard-delete the shop's operational records and credentials on receipt, and in all cases within 30 days of receiving the redaction request. Failed processing is not acknowledged as successful so Shopify can retry. A delayed redaction does not erase a currently reinstalled shop.
Customer redaction — customers/redact removes the matching customer's stored email on receipt, without waiting for shop uninstall or shop redaction, and in all cases within 30 days of the request.
Application logs — retained for 30 days.
Personal-data access audit log (pii_access_logs, metadata only, never personal-data values) — retained for 12 months.

Test and production databases are fully separate. Production personal data is never copied into test or development environments.