Privacy and your data

What is stored

Data	Why
Your option sets, options, pricing and conditional rules	This is your configuration; it is the app.
Which products each set is assigned to	To know where to render options.
Your shop domain and plan	To authenticate your store and apply plan limits.
Customer selections against an order	So you can fulfil what the customer ordered.

What is not stored

Optivo does not collect customer payment details, and does not build a profile of your shoppers. A customer’s selections are stored against the order they belong to, for fulfilment.

Where selections actually live

A customer’s choices are written onto the Shopify order as line item properties. That copy is Shopify’s, is what you read in your admin, and stays with the order after Optivo is uninstalled. See Reading a customer’s choices.

Deletion requests

Optivo implements Shopify’s mandatory privacy webhooks. They are handled according to their purpose:

• Customer data request — a customer asks what you hold about them. The request is shown to the merchant with the data this app holds so it can be sent to the customer.
• Customer redaction — a customer asks to be erased. Their selections and any uploaded files are deleted.
• Shop redaction — sent after you uninstall. Your shop’s configuration and remaining customer data are deleted.

You do not need to do anything to trigger these. Shopify sends them when a request is made through your store’s privacy tooling.

Uploaded files

File uploads are not available in the current release. When they launch, files will go directly from the customer’s browser to storage and will be deleted on customer redaction and shop redaction.

Your own obligations

Optivo is one processor among the apps in your store. Your store’s privacy policy should reflect that customers can submit personalisation text and files with an order, particularly if you operate under GDPR or CCPA.

For questions not answered here, contact support.