Data deletion and privacy requests

Shopify may send AdForge a shop-redact privacy webhook. Merchants may also email admin@novastack.studio with their Shopify shop domain and a clear deletion or privacy request.

AdForge does not intentionally store Shopify customer/buyer personal data, so customer data requests and customer redaction requests are handled as authenticated no-op compliance requests in the current scope.

Shop-redact requests are authenticated and durably accepted. AdForge immediately removes Shopify session credentials and fences work, then deletes tenant PostgreSQL records and private generated assets through a retryable deletion workflow. A minimal non-content tombstone is kept only to prevent a restored backup from reactivating the shop. Do not rely on uninstalling alone as a completed deletion request.

See the Privacy Policy for retained data and contact details.