Data retention and GDPR
Sean McAuliffe
Last Update 3 days ago
RevLogic stores a copy of your Shopify data so it can compute customer intelligence quickly. This article explains how long that data is kept, what happens when you uninstall, and how RevLogic handles the privacy requests Shopify sends on your behalf.
Where your data is kept
Synced orders, products, customers, and the profiles computed from them live in RevLogic's encrypted database, scoped to your store. It's used only to run the features you see in the app, and it's never sold or shared with third parties. See What RevLogic can access for the full permissions picture.
What happens when you uninstall
When you remove RevLogic from your store, Shopify sends a shop redaction request as part of its privacy schedule. In response, RevLogic deletes all of your store's data — orders, products and variants, customers, computed profiles, cross-sell data, merchandising settings, tasks and notes, snoozes, sync records, app settings, and your session. Nothing is retained.
Shopify schedules this redaction to arrive a short time after uninstall — typically around 48 hours — and RevLogic acts on it as soon as it's received. In other words, uninstalling doesn't leave your data sitting with us; it's cleared out on Shopify's standard timetable.
Honoring GDPR requests
Shopify defines a set of mandatory privacy webhooks that every app must support, and RevLogic implements all of them:
- Customer data request. When a customer asks what data you hold about them, Shopify notifies the app. RevLogic's copy of a customer's data is the orders, profile, and activity described throughout this knowledge base — all derived from your own Shopify records.
- Customer redaction (right to be forgotten). When a customer requests deletion, Shopify sends a redaction request and RevLogic deletes that customer's data: their synced orders, their computed profile, and any CRM-side records tied to them — notes, calls, tasks, and snoozes. Specific orders flagged for redaction are removed even when the rest of the customer is retained.
- Shop redaction. The full store cleanup described above, triggered after uninstall.
These requests are verified as genuinely coming from Shopify before RevLogic acts on them, and each one is processed automatically — you don't have to do anything to stay compliant.
Requesting deletion yourself
The cleanest way to trigger customer deletion is through Shopify itself: when you erase or request redaction for a customer in your Shopify admin, Shopify relays that to RevLogic and the corresponding data is removed. If you have a specific privacy request that isn't covered by the standard Shopify flow, start a live chat from the Help page or email [email protected] and we'll handle it.
Privacy and terms
Full details of how RevLogic handles data are in our published policies:
Next steps
- What RevLogic can access — the permissions behind the data.
- What data RevLogic syncs — what's stored and how it's kept current.