Data Deletion

Uninstalling BotShield does not erase every record at that moment. Some information is removed immediately. Some is removed because it expires. The rest of a store’s live app data is removed when Shopify sends a shop-redaction request. That request does not erase a database recovery copy or a created database export.

The 30-day rule applies to storefront security events. It does not apply to every kind of information.

1. 1

   You uninstall BotShield

   Access to the store ends. Security events, visitor lists, and settings are still there. Uninstalling does not erase every record.

2. 2

   App sessions are removed

   Stored app sessions for that store are deleted as part of the uninstall, not on a later timer. Those sessions are what let the app act in Shopify admin.

3. 3

   Shopify sends shop redaction

   Shopify later sends a shop-redaction request. BotShield does not choose when that request arrives, and does not promise a number of hours or days.

4. 4

   Shop records are deleted

   When that request is handled, BotShield deletes that store’s sessions, security events, blocked addresses, trusted addresses, and settings. The shared network lookup cache is not deleted in this step.

Uninstall removes BotShield’s access to the store and deletes the app sessions stored for that store. Those sessions are what let the app act in Shopify admin.

Uninstall does not delete storefront security events, blocked addresses, trusted addresses, or app settings. Newer security events can remain until shop redaction, unless they are already old enough for the 30-day removal.

Two removal rules keep running while the app is operating. They are not a full deletion of the store, and the 30-day rule does not apply to every kind of information.

30 days — security events

Storefront security events older than 30 days are deleted on a schedule. That includes simulation events stored as events. It does not include trusted lists, blocked lists, or settings.

24 hours — network lookup

Network lookup results are cached by IP address, not by store, for 24 hours. Expired entries are then deleted on a schedule. One address has one shared cache entry.

These jobs run on a schedule. A record is not guaranteed to disappear at the exact minute it becomes 30 days or 24 hours old.

Shopify sends a shop-redaction request after a store has uninstalled an app. BotShield does not control that timing and does not promise a number of hours or days.

When a valid shop-redaction request arrives, BotShield deletes that store’s:

• App sessions
• Storefront security events
• Blocked visitor entries
• Trusted visitor entries
• App settings, including protection preferences, alert email, and billing status

The shared network lookup cache is not part of that deletion. It expires through the 24-hour cache rule.

Those deletions remove live rows in the current database. They do not delete Render’s recovery history. The current recovery window for this database is 3 days. A database export, if one has been created, may be retained for at least 7 days. This page does not say that an export exists now. Copies kept by Shopify, Resend, DreamHost, or ipapi.is are not deleted by shop redaction, and this page does not state how long those providers keep them.

BotShield receives Shopify’s customer data requests and customer deletion requests. Security events are stored by visit. They are not linked to a Shopify customer record, so those requests do not match a customer profile to export or delete. They do not remove the store’s events, lists, or settings. Shop-wide deletion is the shop redaction described above.

Clearing simulation data is a separate action inside the app. It removes diagnostic and simulation events for that store. It does not remove live storefront events, settings, or visitor lists. Simulation events that you do not clear are still removed when they are older than 30 days, and they are removed if the store’s app data is deleted.

Fraud Orders reads supported order-risk information from Shopify when you open it. It does not create a separate permanent archive of orders in BotShield. There is no order archive to delete beyond the access itself, which ends when the app is uninstalled or the order permission is removed.

Email support@botshieldapp.com with the store domain and what you want removed. A merchant can ask BotShield to delete the store’s app data before Shopify sends shop redaction. That request covers the same shop records: sessions, security events, blocked addresses, trusted addresses, and settings.

This page does not promise that a request will be completed within a set number of days. The shared network cache still expires on its own 24-hour schedule. A deletion request does not erase a recovery copy or a created database export.

Email support@botshieldapp.com about a deletion or privacy request. Include the Shopify store domain.

The handling of each information category is also described in the Privacy Policy. Subscription cancellation is described in the Terms of Service.