Privacy and GDPR
Plan: every plan, including Free.
For your shoppers’ data, you are the controller and Cove is the processor: it handles that data only to run the app for you. The legal text is in the privacy policy and the terms and data processing addendum; this page explains the same rules in practice.
What is stored
Section titled “What is stored”Cove stores Shopify IDs, not personal details.
| About | What is stored |
|---|---|
| Your store | Store domain, plan, settings and design, and the access token Shopify issues at install. |
| Signed-in shoppers | Shopify customer ID, saved product and variant IDs, list names, notes shoppers add to their own items, share links they create, and when each item was saved or removed. |
| Guest shoppers | A one-way hash of a random identifier kept in the shopper’s browser, plus the same wishlist data. |
| Analytics | Daily counts per store, never a history per shopper. |
| Wishlist sales | For each order line counted as a wishlist sale: order, line item and product IDs, quantity, amount, currency and date. No customer ID. |
| Alerts | For “Notify me” requests: the variant, the email language and, for a signed-in customer, their customer ID. For reminders: the customer ID and when they were last sent one. Sent alerts keep counts only. |
| Imports | The uploaded file, encrypted, for 24 hours at most. See Import. |
The one email address Cove stores
Section titled “The one email address Cove stores”When a guest types their email into Notify me when available, Cove keeps that address for that alert only:
- encrypted with AES-256-GCM and bound to its own record, so a copied value can’t be opened elsewhere;
- with a keyed one-way hash beside it, used only to avoid duplicates, handle unsubscribes and block bounced addresses;
- never shown to you, never exported, never written to a log;
- deleted when the alert is sent, when the shopper unsubscribes, after 180 days, or when Shopify sends a redaction request.
Signed-in customers’ email addresses are read from Shopify at the moment an alert or reminder is sent, and never stored.
What is never stored
Section titled “What is never stored”- Shoppers’ names, phone numbers, postal addresses or payment details.
- Any email address other than the guest Notify me address above. Emails in an import file are used in memory to find customers and never written anywhere.
- Your store’s own email address: the summary email reads it from Shopify when it’s sent.
- Third-party secrets, such as Klaviyo or Omnisend API keys.
Cove sets no cookies, uses no advertising or cross-site tracking, and alert emails carry no tracking pixels or tracked links.
Every wishlist change is logged with Cove’s internal IDs and counts only: never a customer ID, email address or product ID. Errors and email activity are logged the same way, with counts and no addresses.
How long data is kept
Section titled “How long data is kept”| Data | Kept until |
|---|---|
| Wishlists | You uninstall the app (see below). |
| Items a shopper removed | 90 days after removal. |
| Import files | The import ends, or 24 hours after upload at the latest. |
| A guest’s Notify me request and email | The alert is sent, the shopper unsubscribes, or 180 days. |
| A Notify me request awaiting its double opt-in confirmation | 7 days. |
| Wishlist sales | 400 days after the order. |
| Order IDs kept to ignore Shopify’s repeated deliveries | 30 days. |
| A bounced or spam-reported address | A one-way hash (never the address) for one year, so it isn’t emailed again. |
| A signed-in customer’s unsubscribe | Their customer ID with that choice, so they aren’t emailed again. |
| All of your store’s data | Shopify’s shop redaction request, about 48 hours after you uninstall. |
Shopify’s privacy requests
Section titled “Shopify’s privacy requests”Shopify sends every app three kinds of privacy request, and Cove answers each automatically:
| Request | What Cove does |
|---|---|
| Customer data request | Returns what it holds about the customer: their saved product IDs, pending alerts, when they were last sent a reminder, and the wishlist sales recorded from the orders Shopify names. |
| Customer redaction | Deletes the customer’s wishlists, alert requests (matched by customer ID and by the hash of their email address) and reminder record, and the wishlist sales recorded from the orders Shopify names. |
| Shop redaction | Sent by Shopify about 48 hours after you uninstall. Deletes all of your store’s data. |
Shoppers who want to use their privacy rights should contact your store; Cove acts on your and Shopify’s requests.
Where data is processed
Section titled “Where data is processed”| Who | What for | Where |
|---|---|---|
| Railway Corporation | Application hosting and database | the European Union (Amsterdam, Netherlands) |
| Lettermint B.V. | Sending alert emails (the recipient’s address, the email itself, delivery and bounce status) | the European Union (Netherlands) |
Shopify provides the store data the app reads, under Shopify’s own privacy policy. Cove never sells data or uses it for advertising.