Data Deletion Instructions
Effective date: 2026-06-03
Merchant uninstall
When a merchant uninstalls the app, Shopify sends an app/uninstalled webhook. After that webhook is received and verified, CompliAI removes the shop record and related app data from the active production database.
Shopify compliance webhooks
CompliAI verifies Shopify webhook HMAC signatures and responds to the required customers/data_request, customers/redact, and shop/redact compliance topics. A shop/redact request removes the shop and related app records from the active service. A customer/redact request removes matching customer privacy request records held by the app.
Merchant deletion requests
Merchants can request additional deletion support by emailing support@devitapps.com from an owner or admin contact and including the myshopify.com store domain.
Customer requests
Storefront customers should send access, deletion, correction, or opt-out requests to the merchant that operates the store. The merchant can use CompliAI's privacy request tools or contact us for support.
Timing and verification
We verify deletion requests before acting on them. We aim to complete valid manual deletion requests within 30 days unless a longer period is required for security, fraud prevention, billing records, legal obligations, or dispute handling.
Backups and security logs
Deleted data may remain in limited backups, audit records, or security logs until those systems expire in their normal cycle. Those records are not used for ordinary app operation.
Contact
Deletion questions can be sent to support@devitapps.com.