Security and privacy
Facts about your data, true on the day this page was published.
What we read
Shopify
- Orders, 2 years (read)
- Products (read)
- Stock per location (read)
- Incoming stock (read)
- Shipping settings (read)
- Store policies (read)
- Markets (read)
- Customers: email, first name, email consent and order count (read)
- Merchant Center: Product statuses and issues, account status (read)
- Google Ads: Campaign spend per day and per product (read)
- Google Analytics 4: Sessions, users and conversions (read)
- Search Console: Clicks, impressions and position (read)
Meta
- Campaign spend and results per day (read)
What we change
- Nothing without your approval, one approval per action.
- On install we add a tracking pixel to your store.
How we protect access
- Store access tokens are encrypted, with a key kept outside the database.
- Every Shopify webhook is checked against its signature before we read it, and every sign-in callback is checked.
Where data lives
- App data is stored on servers in the European Union.
- Encrypted backups are kept in Germany or Finland.
How long we keep it
| Data | Period |
|---|---|
| Shopper email and name | Until your store asks us to delete them, or 48 hours after you remove the app, unless you reconnect or another of our apps is still installed |
| Coded customer record | Until Shopify asks us to delete your store's data |
| Coded on-site events | No time limit |
| Daily totals | No time limit |
| Backups | Up to about 37 days |
| Error details of failed calls | 7 days |
| Webhook IDs | 24 hours |
Shopper data
- The pixel collects page and shopping events (pages viewed, cart and checkout steps) with the page address, referrer, campaign tags, device type and time.
- Each event carries a coded visitor ID. When the shopper is a known customer of the store, we link that visitor ID to the store's customer record, which holds the shopper's email address, first name and email consent state. So those events can be tied to a named person.
- Shoppers' emails and first names are encrypted.
- The pixel's ingest logs keep no shopper IP address.
- Vendumo never stores shoppers' phone numbers or postal addresses.
Delete your data
- Remove the app and we delete your store's data 48 hours later, unless you reconnect or another of our apps is still installed.
- We handle Shopify's customer and shop deletion requests, and customer requests within 30 days.
Subprocessors
Report a problem
- Email [email protected].