Privacy
AppVerix Loyalty stores the least we need to run a points program. We do not keep customer names, emails, phones, or addresses.
Shop domain, program settings, Shopify customer IDs, point balances, pending points, recorded debt, VIP tier IDs, rolling 12-month spend totals, order counts, birthday as month-day only, ledger rows, redemptions, and email send logs without addresses.
When a notification is sent, the address is read from the Admin API at send time and is not written to our database. A send log records the customer ID, kind, and time.
customers/data_request returns the member, ledger, and redemption rows for that customer ID.
customers/redact deletes the member, ledger, redemptions, email log, and order rows for that customer ID.
shop/redact deletes every row for that shop, including sessions.
On app/uninstalled we delete OAuth sessions and stop scheduled jobs. Shop data is removed when shop/redact arrives.
Questions: privacy@appverix.com