Privacy and retention

Customer Data Health processes Shopify customer fields only for the documented quality workflow. The current detectors use contact and profile signals such as name, email, phone, company and address data, together with store-scoped metadata needed to identify the record and the review result.

Purpose

The data is used to detect duplicate candidates, explain quality issues, prepare a proposed correction or merge, apply a merchant-approved action and keep an audit trail. It is not sold, used for advertising or exported to an external identity or address registry.

Retention

Customer fingerprints are retained for the configured operational window, which defaults to 180 days in the current release. Queue, webhook and audit housekeeping records are retained for the operational period documented by the app. Scan results and remediation history remain while the store needs its review history unless the tenant is deleted or a verified deletion request applies.

Shopify uninstall, customer deletion/redaction and shop redaction events are handled as deletion boundaries. Merchants can also use the public NarrowForge deletion process or contact support with the store domain. Do not send passwords, API keys or unnecessary customer data in a support request.

Read the full Customer Data Health privacy policy and security policy for the current boundary.