Handle customer privacy requests

Open Settings > Privacy requests to review customer data requests and related privacy settings. This guide describes the controls; it does not replace your legal obligations or Shopify's current customer-management guidance.

Review and complete a request

1. Read the request's origin, identity state, status and due information. A received request is not a completed erasure.
2. For an unverified web request, verify the requester through your established process. Use Identity verified only after that check, or Could not verify when it fails.
3. Use Open customer in Shopify to inspect the relevant customer record. Avoid exporting or sharing customer details unnecessarily.
4. For an eligible app request awaiting merchant action, Erase in Shopify now requires Shopify erasure access. Follow the displayed result; a submitted action can still be pending or fail.
5. If you completed the required action directly in Shopify, use Mark as erased only to record that actual outcome. This button is not a substitute for erasing the Shopify customer.
6. Recheck the request status and any outstanding instructions. Vunda cleanup and Shopify customer erasure are separate operations; neither proves every connected service has completed its responsibilities.

Choose automation deliberately

Erase customers in Shopify automatically applies to new eligible app requests and requires the relevant access. Use Allow erasure access only when authorised to grant it. Do not assume the toggle retroactively completes existing requests or covers every request source.

Under Store listings, use the provided deletion-request information for your app listing as appropriate. Keep the published contact and privacy-policy details consistent with your process. See your privacy obligations.

Saved-item sync is a separate choice

Sync saved items across devices enables the supported signed-in saved-item experience when available. Guest saves remain local. It does not enable cross-device routine or drop reminder sync. Check both sign-in and the setting before advertising synchronisation.

Never test a destructive privacy action against a real customer merely to confirm the button works. Use an authorised test identity and check the recorded outcome, not just the success toast.