shopify-data-handling

# Shopify Data Handling ## Overview Handle customer PII correctly when building Shopify apps. Covers the mandatory GDPR webhooks, data minimization, and the specific privacy requirements Shopify enforces for App Store submission. ## Prerequisites - Understanding of GDPR/CCPA requirements - Shopify app with webhook handling configured - Database for storing and deleting customer data ## Instructions ### Step 1: Understand What Data Shopify Shares When a merchant grants your app access, you may receive: | Data Type | Source | Sensitivity | Retention Obligation | |-----------|--------|-------------|---------------------| | Customer email, name, phone | `read_customers` scope | PII — encrypt at rest | Delete on `customers/redact` | | Shipping addresses | `read_orders` scope | PII — encrypt at rest | Delete on `customers/redact` | | Order details (amounts, items) | `read_orders` scope | Business data | Delete on `shop/redact` | | Product data | `read_products` scope | Public | Delete on `shop/redact` | | Shop owner email | `read_shop` scope | PII | Delete on `shop/redact` | ### Step 2: Implement Mandatory Privacy Webhooks Shopify **requires** three GDPR webhooks for App Store apps. Your app will be **rejected** without them. ```typescript // 1. customers/data_request — Customer requests their data // Shopify sends this when a customer asks the merchant for their data async function handleCustomerDataRequest(payload: { shop_domain: string; customer: { id: number; ema...