Privacy and data

What is stored: order risk records (order number, email, IP, addresses' countries, amount, score, signals), checkout attempts, visitor sessions, device fingerprints, alerts, your blocklists and rules, and your settings.

What is never stored: card numbers, full payment details, passwords.

Retention: everything except blocklists, rules and settings is deleted after your retention period (default 12 months).

Uninstall: 48 hours after uninstall, Shopify instructs FlexifyGuard to delete the store's data, and it does.

Customer requests: GDPR data-access and deletion requests received through Shopify are fulfilled automatically.

Cookie consent: the storefront script honours Shopify's Customer Privacy consent. Visitors who decline analytics are not tracked.

Cross-store data: only the Threat Intel Network shares anything between stores, only IP addresses, and only if you turn sharing on.

Full policy: https://flexify.ltd/privacy (or the link in the App Store listing).