> ## Documentation Index
> Fetch the complete documentation index at: https://docs.aftersell.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Data and privacy

> What customer data Aftersell handles, how data-deletion and privacy requests work, and where to find the official privacy policy.

This page explains, at a merchant level, what customer data Aftersell handles and how privacy and data-deletion requests are processed. It is a practical summary, not a legal document.

<Note>
  The authoritative legal terms are in the [Rokt Privacy Policy](https://www.rokt.com/policies/privacy-policy) and the [Aftersell (powered by Rokt) Services Agreement](https://www.rokt.com/policies/aftersell-powered-by-rokt-services-agreement). Where this page and those policies differ, the policies apply.
</Note>

***

## What data Aftersell handles

Aftersell operates as an app installed on your Shopify store. Your Shopify store remains the canonical record of your customers — Aftersell stores only the limited identifiers it needs to attribute upsell offers to orders, such as checkout tokens, Shopify customer IDs, and offer/funnel journey records.

Each Shopify store is treated as an independent data controller. Data belonging to one store is never mixed with, or exposed to, another store.

<Note>
  If your store also uses **Rokt Thanks**, Rokt may process additional data to serve and measure partner offers. This is covered by the same [Rokt Privacy Policy](https://www.rokt.com/policies/privacy-policy) linked above, and shoppers can manage their preferences through the controls Rokt presents at the point of the offer.
</Note>

***

## Data-privacy requests

Aftersell supports Shopify's mandatory data-privacy (GDPR/CCPA) webhooks. When Shopify sends one of these requests on behalf of a shopper or a store, Aftersell handles it automatically:

| Shopify request                                      | What Aftersell does                                                                                                                                                                                                                                                                                    |
| ---------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
| **Customer data request** (`customers/data_request`) | The request is logged internally. Because your Shopify store holds the canonical customer record and Aftersell stores only limited identifiers, there is usually little additional data to return; anything that needs manual fulfillment is escalated to [privacy@rokt.com](mailto:privacy@rokt.com). |
| **Customer redact** (`customers/redact`)             | Deletes the data associated with that customer. If your store uses Rokt Thanks, the deletion is also propagated to Rokt for that customer (this is an asynchronous process that can take up to 30 days to fully complete).                                                                             |
| **Shop redact** (`shop/redact`)                      | Fired after you uninstall the app. Cleans up your store's integration records.                                                                                                                                                                                                                         |

You do not need to configure anything for these to work — they are handled for every store.

***

## Submitting a request

* **Shoppers** should contact the store they purchased from. The store (as the data controller) can initiate a data request or deletion through Shopify, which Aftersell then honors automatically.
* **Merchants** who need to escalate a specific data request — for example, exporting data that Rokt may hold for a Rokt Thanks–integrated store — can email [privacy@rokt.com](mailto:privacy@rokt.com).

***

## Data retention after cancellation

When you cancel Aftersell, your settings, funnels, widgets, and configurations are retained for up to one year so you can restore them if you reinstall. After one year, that data may be removed. See [How do I cancel my Aftersell subscription?](/aftersell/how_do_i_cancel_my_aftersell_subscription) for the full cancellation flow.

Uninstalling the app also triggers Shopify's `shop/redact` request, which cleans up your integration records as described above.

***

**Related**

* [Rokt Privacy Policy](https://www.rokt.com/policies/privacy-policy)
* [Aftersell (powered by Rokt) Services Agreement](https://www.rokt.com/policies/aftersell-powered-by-rokt-services-agreement)
* [How do I cancel my Aftersell subscription?](/aftersell/how_do_i_cancel_my_aftersell_subscription)