Data Deletion and Retention

How merchants can disconnect integrations and request deletion.

Launch draft — pending technology/privacy counsel approval. Version: 2026-08-23-draft. This draft is not represented as legal advice or counsel approval.

Request deletion

Signed-in users can use Settings → Privacy, or email privacy@aimecommerce.app with the subject “Aimé Data Deletion Request.” Include the Aimé account email and enough workspace or store information for verification. Never send access tokens or passwords.

Disconnect first

Disconnect Shopify from Aimé’s Integrations page or uninstall Aimé in Shopify Admin. Aimé attempts to revoke the Shopify token, deletes its encrypted copy, and prevents further Shopify API actions. Shopify privacy webhooks are authenticated and processed idempotently.

Default schedule

Raw Shopify API responses: not persisted beyond processing.
Order-linked identifiers: no more than 90 days.
Rights-request exports: 24 hours.
Deleted-account operational data: purge targeted within 30 days after verification.
Financial, fraud-prevention, and security records: only for counsel-approved statutory or security periods.

What remains

Irreversibly aggregated product metrics that cannot identify a person may remain for the workspace lifetime. Records required by law or necessary to establish, exercise, or defend legal claims may be retained for a documented limited period.