Privacy & data requests
How Customezo handles GDPR data requests and redactions, what data it stores about your customers, and where to find the exports.
Customezo handles your customers’ privacy requests for you: Shopify forwards them to the app, redactions are applied automatically, and data requests are prepared as a download under Settings → Privacy & data requests. You can answer a customer without leaving the app.
Request types
| Type | What it means | What Customezo does |
|---|---|---|
| Data request | A customer asked for a copy of their data. | Collects everything Customezo holds for that customer and offers it as a JSON download. |
| Customer redaction | A customer asked to be deleted. | Removes or anonymizes that customer’s personal data in Customezo. |
| Shop redaction | Your store uninstalled the app and the retention window has passed. | Removes the store’s data. |
Each row shows the request type, the customer, how many records are affected (drafts, orders, design orders), the status, and when it was received.
Answering a data request
- Open Settings → Privacy & data requests.
- Find the request and press Download JSON.
- Send the file to the customer through your usual channel.
The export contains the Customezo-side data for that customer: their design drafts, design orders and the associated records. Shopify order and account data comes from Shopify’s own export.
What Customezo stores about customers
- Designs and drafts — the design content, the assets used and the product it was made on.
- Uploaded assets — images the customer uploaded while designing.
- Order-linked data — the customer’s name, phone and shipping ZIP as needed to produce and ship the order, plus notes.
- Add-to-cart confirmation answers — what the customer ticked or typed in your confirmation fields.
- Proof records — the e-mail address a proof was sent to, the customer’s change requests, notes and attachments, and a masked IP address and browser details recorded with their decision. See Proof approval.
- Rendered output — previews and print files for ordered designs.
Retention
- Design drafts and uploads are kept so customers can come back to unfinished work.
- Order-linked designs and print files are kept for as long as you need them for production and reordering.
- Files used by paid orders are protected. Customezo regularly cleans up uploads nobody uses any more, but any image or file used by a paid order is excluded from that cleanup, so print files can always be rebuilt.
- After a shop redaction, store data is removed.
Redaction removes production files too
A customer redaction anonymizes that customer’s records — including confirmation answers and proof notes — and cancels any open proof. If you still need a print file for an open order, download it before the redaction is processed.
Your own obligations
Customezo processes data on your behalf. You remain the controller of your customer data, which means your store’s privacy policy should mention that:
- customers’ uploaded images and designs are processed to produce their order,
- design files are stored to fulfil and support the order,
- an app is involved in that processing.
If you operate in the EU or UK, add Customezo to your record of processing activities alongside your other apps.
Related
Plans & billing · Portal · Proof approval & customer e-mails