Scope

What this covers

Hof Media builds and runs Shopify stores for the merchants it works with. This page covers the Hof Media app, which a merchant installs on their own Shopify store so that Hof Media can report on that store for its owner.
It says what the app reads, where that is kept, who sees it, and how to have it removed. Questions go to jacob@hof.media.
Data

What the app reads

Orders: order id, number, dates, totals, currency, financial and fulfilment status, source, tags, and the customer id on the order.
Customers: customer id, account state, order count, amount spent, currency, marketing consent and its date, tags, tax status, and whether the email is verified. The app does not read names, email addresses, phone numbers or postal addresses.
Products: title, handle, status, type, vendor, prices, inventory totals, tags.
Storage

Where it is kept and who sees it

Each store's data is copied once a night into a BigQuery dataset on Google Cloud that holds only that store's data. Hof Media staff use it to produce reporting and analysis for the store's owner.
It is not sold, not shared with other merchants, and not used for advertising to the store’s customers. Google Cloud acts as the storage provider under Google’s terms.
Retention

How long it is kept

For as long as the store keeps the app installed. When a store uninstalls the app, Shopify sends a shop-redaction request after 48 hours, and that store’s dataset is deleted within 30 days of the request.
Your rights

Customer requests

Shopify forwards customer data requests and customer redaction requests to the app, and each one is logged on receipt.
Data requests are answered to the store owner within 30 days. Redaction requests remove that customer’s rows from the store’s dataset within 30 days. A store owner can also write to jacob@hof.media for either.
Security

How it is protected

Access tokens are held in Google Secret Manager and read only by the nightly job. Webhook deliveries are accepted only when their signature verifies against the app’s secret.
Changes

Updates to this page

This page is updated when the app’s behaviour changes, and the effective date above moves with it.