Data & privacy

Ayra stores the customer, order and product data it needs to run the modules you turn on, keeps it in one primary region, retains it for as long as the app is installed plus the short windows Shopify requires, and handles access and erasure requests through Shopify’s mandatory GDPR webhooks so you never have to contact us to fulfil a request. Customer data is used only to operate your store’s retention program; it is not sold, shared across merchants or used to train models.

What Ayra stores

Data	Why	Examples
Customer profile	One profile per customer, identity resolution	Shopify customer ID, email, phone (if present), name, tags, address country and time zone, consent flags, hashed device identifiers for guest merge
Signals	The timeline and the engine	Order events, product views, wishlist and restock actions, logins, support events from integrations
Wallet ledgers	Points, store credit mirror, vouchers	Every earn, spend, expiry and reversal with its reason
Referral data	Referrals	Codes, links, invites, pending and granted rewards, the referred customer’s ID
Reviews and Q&A (later)	Reviews	Review text, rating, media files, reviewer display name, moderation state, replies
Opportunities, decisions and actions	The engine and Journey Guard	Opportunity type and evidence, decision reasons, actions sent, held or dropped, delivery and engagement
Messages	Flows and module messages	Rendered content, channel, delivery status; SMS and WhatsApp message bodies are kept 90 days
Store configuration	Settings	Module settings, flows, Journey Guard rules, tiers, templates
Billing usage	Order metering	Monthly order counts, plan, credit balance

Ayra does not store payment card data, full addresses beyond country and region, passwords (there are none) or the content of customer support conversations (only that an issue is open or resolved).

Where it is stored

TODO

Primary data region: {REGION}. Replace with the confirmed region (and any secondary region for backups) before the public listing; the same placeholder is on /about and /security.

Data is encrypted in transit (TLS 1.2+) and at rest. Backups are encrypted and kept in the same region. Media for reviews is stored on Ayra’s CDN in the same region with signed URLs. Sub-processors (hosting, email, SMS and WhatsApp delivery) are listed on the security page.

Retention

Data	Kept for
Profile, ledgers, referral data, configuration	While the app is installed, then deleted 48 hours after uninstall when Shopify sends shop/redact
Signals and actions	Rolling 24 months while installed (older entries are summarised into profile counters)
Messages	90 days for SMS and WhatsApp bodies; delivery status 24 months
Review media	While the review exists; deleted with the review or with the shop
Billing usage	7 years, anonymised to counts, for accounting
Logs	30 days

Export options before uninstall are on Uninstall & export.

GDPR requests through Shopify

Ayra implements Shopify’s three mandatory privacy webhooks, so a request a customer makes to you (or you make on their behalf from the Shopify admin) reaches Ayra automatically.

Request	Webhook	What Ayra does
Access	customers/data_request	Compiles the customer’s profile, ledgers, referrals, reviews, signals and actions into a file and returns it to the merchant within Shopify’s 30-day window
Erasure	customers/redact	Deletes personal data (identity, contact details, device identifiers, review names, message bodies), anonymises ledger lines that must be kept for accounting, and removes the customer from all segments and flows
Shop deletion	shop/redact	Deletes all data for the shop 48 hours after uninstall

Erasure is irreversible; store credit issued through Shopify is Shopify’s record and is governed by Shopify’s own handling of the request.

Customer data erasure on request

If a customer asks you directly, use Shopify’s Customers → (customer) → Erase personal data. Shopify sends customers/redact to Ayra and every other app. There is no separate Ayra form, and Ayra does not need to be contacted. The customer’s timeline shows one final line, erased on request, with no personal data attached.

Consent

Marketing consent for email and SMS is read from Shopify’s customer consent fields and respected by Journey Guard on every send; Ayra never sends a promotional message to a customer without the matching consent. WhatsApp consent is collected by Ayra’s own opt-in and stored on the profile with the timestamp and source.

Related

• Security and the security page
• Install & connect: the access scopes requested.
• Webhooks & API