At a glance

API scopes used

Customer or order records stored

48 hrs

Until Shopify sends the shop deletion request

Shuffly requests three Shopify Admin API scopes: read_products, write_products, and read_inventory. They are used to read products and collections, set product positions in collections you choose, and react when inventory changes. Shuffly never requests customer data, order data, or access to your storefront theme.

What Shuffly stores

What

Why

Shop domain, timezone, and authenticated app session data (which can include staff name and email)

So the app can authenticate the shop and run schedules at the right local time.

Which collections you've added, and how (pin count, toggles, schedule)

So Shuffly knows what to shuffle and when, and remembers your settings between visits.

A rolling history of shuffle runs

Powers the Activity screen and Undo.

Operational logs such as shop domain, webhook status, and error diagnostics

Used to secure, operate, and troubleshoot the service.

We don't store product content beyond what's needed to display it inside the app, and we never store customer or order information.

Data retention & compliance

Shopify sends Shuffly a shop-deletion request 48 hours after uninstall. Shuffly deletes the shop's stored app data when that request arrives. Your collections keep whatever order they had at uninstall — Shuffly does not revert anything.

The three compliance webhooks Shuffly handles

customers/data_request

Sent if a customer asks a merchant for their data. Shuffly never stores customer data, so there is nothing to export — Shuffly acknowledges the request.

customers/redact

Sent when a customer's data must be erased. Same as above — Shuffly holds no customer records to redact, and acknowledges the request.

shop/redact

Shopify sends this 48 hours after a shop uninstalls Shuffly. On receipt, Shuffly hard-deletes every stored row for that shop, including configuration, settings, sessions, and run history.

Third parties & contact

Shuffly does not sell your store's data. Shopify and the infrastructure used to operate Shuffly process data only as needed to provide the service. Billing is handled through Shopify's Billing API — Shuffly never sees your payment details.

Questions about this policy or your data? Write to team@mpctrades.com.

Share this policy outside Shopify Admin: Open the public policy