Wunder Edit
Add to Shopify
Transparent by default

Data deletion and app uninstallation

What happens to access and stored information when a merchant removes Wunder Edit or asks us to delete data.

Implementation review required. Confirm this description against the production webhook handlers, data stores, logs, billing systems and support procedures before launch.

When the app is uninstalled

Shopify sends an app-uninstalled event and revokes the app’s ability to access the store through its access token. Wunder Edit should invalidate the installation, stop scheduled synchronisation and begin the configured retention and deletion process.

Shopify mandatory privacy webhooks

Wunder Edit must securely receive and verify Shopify’s mandatory customer data request, customer data erasure and shop data erasure webhooks. Valid requests are logged for controlled processing and handled within Shopify’s applicable timeframe. The production implementation must verify webhook authenticity before acting.

Request deletion directly

  1. Email support@wunderedit.com from an address associated with the store.
  2. Include the *.myshopify.com store domain and state that you are requesting data deletion.
  3. Do not include passwords, access tokens or customer personal data.
  4. We will confirm the scope, verify authority and provide a response timeframe.

Expected response time: TODO: Confirm the response timeframe for deletion requests.

Identity and authority verification

We may ask the requester to confirm control of the merchant email or Shopify store, verify the request through an authorised admin, or provide other limited information needed to prevent unauthorised deletion.

Information that may be retained

Some records may be retained where necessary for legal obligations, tax and billing records, fraud prevention, security, dispute resolution or establishment of legal claims. Retained data will be limited, access-controlled and deleted or anonymised when the relevant need ends. TODO: Add exact categories and retention periods.

Completion

Once the verified request is completed, we will confirm the action unless prohibited by law or doing so would create a security risk. Backups may age out on a separate controlled schedule and should not be restored to active use except for disaster recovery.

Questions

Contact support@wunderedit.com and include your Shopify store domain.