Data Retention Policy

This page describes exactly what personal data AIOM collects, how long every category of data is kept, and how deletion works.

Personal data we collect

• We request the customer email address only from Shopify orders.
• We never request or store customer names, phone numbers, or physical addresses.

Retention periods

• Order, refund, fee and payout records (including customer emails) — retained for the life of the merchant's subscription, so profit and reconciliation history stays accurate.
• On uninstall — all merchant data is deleted within 48 hours of receiving Shopify's app/uninstalled webhook.
• GDPR redaction — customers/redact and shop/redact webhooks are executed as hard deletes (not soft-delete flags) on receipt, and in all cases within 30 days.
• Application logs — retained for 30 days.
• Personal-data access audit log (pii_access_logs, metadata only, never personal-data values) — retained for 12 months.

What we never do

• No personal data is sold or shared with third parties.
• No personal data is used to train AI or machine-learning models.

Environment separation

Test and production databases are fully separate. Production personal data is never copied into test or development environments.

Contact

Privacy requests: privacy@aiomprofitguard.com