What we collect

When a Shopify merchant installs CommerceGuardian OS, we receive only the order, customer, and fulfillment-order data necessary to validate, hold, request correction of, and release shipping addresses. Specifically: order id, order name, customer email (hashed for de-duplication), shipping address, fulfillment-order id and status, and the merchant's store domain.

How we use it

Address information is used solely to score delivery risk, compose a customer correction email, and apply or release a Shopify fulfillment hold. Address snapshots are encrypted at rest using AES-256-GCM. Customer emails may be stored encrypted when needed for correction email delivery and preview logs; SHA-256 hashes are used for de-duplication and lookup where the plaintext email is not needed.

AI sub-processors

When a merchant's plan includes AI insights, the minimum address components and risk metadata needed for that feature may be sent to a configured business API provider. We configure providers for no training or data-retention reduction where the provider and plan support it, but merchants should review the provider terms that apply to their selected AI provider or bring-your-own-key configuration. Merchants on the Scale plan can supply their own API keys (BYOK) and route AI calls through their chosen provider account.

Data retention

Default retention is 180 days. Each merchant can configure a shorter retention period in Settings. On app uninstall the merchant's API access is revoked immediately; on receipt of a Shopify shop/redact webhook all merchant data is deleted within 48 hours.

GDPR / customer rights

We honour Shopify's mandatory privacy webhooks: customers/data_request, customers/redact, and shop/redact. Customers wishing to exercise data access or deletion rights should contact the merchant; the merchant's request is forwarded to CommerceGuardian OS via Shopify and processed within statutory timelines.

Contact

info@commerceguardianos.com