Data Deletion Policy

Overview

This policy explains what happens to merchant data when StockLift is uninstalled and how merchants can request complete deletion.

On uninstall (automatic)

When you uninstall StockLift, Shopify sends an app/uninstalled webhook. We automatically:

• Delete OAuth session records for your shop
• Clear the Shopify access token in our database
• Mark the shop as uninstalled
• Stop serving offers via the storefront API
• Reject new tracking events for your shop domain

Shopify discount codes created by StockLift are not automatically deleted from your Shopify admin. Pause or delete active offers before uninstalling, or remove codes manually under Discounts.

Shopify GDPR webhooks

StockLift implements mandatory Shopify compliance webhooks:

• customers/data_request — we do not store end-customer PII; no exportable customer records exist in StockLift
• customers/redact — no customer personal data to delete
• shop/redact — permanently deletes all shop data from StockLift systems

Merchant-requested deletion

To request complete deletion of shop data:

1. Email pufflyapp@gmail.com from an address associated with your store
2. Include your shop domain (e.g. your-store.myshopify.com)
3. State that you want full data deletion

We verify authorization and complete deletion within 14 business days, then confirm by email.

Data deleted on request

• Shop record and settings
• Product snapshots
• Suggestions and offers
• Event tracking and processed order attribution
• OAuth sessions

End-customer data

StockLift does not intentionally store end-customer names, emails, phones, or addresses. Customer data requests should be directed to the merchant (data controller).

See also our Privacy Policy.