GDPR readiness statement

Valyn is designed around limited Shopify permissions, focused processing, and clear deletion behavior for merchant and customer data.

Data minimization

The app requests only the Shopify access needed to answer order support questions and avoids modifying store data.

Right of access

Customer data access requests received through Shopify privacy tooling are logged for operational follow-up.

Right of deletion

Valyn processes Shopify customer redaction and shop redaction webhooks to delete customer-specific or shop-specific data.

Data retention

Raw inbound emails expire after 30 days. Order and reply logs auto-expire at the end of the plan's retention window (7 days on Starter, 90 days on Pro), and are also removed on request or via Shopify privacy workflows.

Contact for data requests

Merchants can contact support@getvalyn.com for privacy and data request questions.