Loading page content
How Reorder Predictions uses store data
This page describes what the app does with data from your Shopify store, as built today. It adds detail to the HappifyApps privacy policy.
Version 0.1.0 · Reviewed against the app’s code on 2026-10-04
In short
Reorder Predictions reads your order history, customers and products to calculate reorder windows. It writes customer tags you ask for, and sends audiences to Klaviyo only when you connect your own account and click send.
All Happify apps run on one platform and one Postgres database (Supabase), hosted with the apps on Vercel. Store data is kept once per store, not once per app: if you install two Happify apps, they read the same copy of your products, inventory and orders.
Permissions and why
| Shopify permission | Used for |
|---|---|
| read_orders | Order history for reorder intervals. |
| read_all_orders | Orders older than 60 days; intervals need longer history. |
| read_customers | Customer names and emails, and their live email marketing consent at activation. |
| write_customers | Customer tags only (status tags and VIP). |
| read_products | Products and variants to classify. |
| read_inventory | Stock levels on products in the shared catalog. |
| read_locations | Locations for inventory in the shared catalog. |
What the app stores
- Orders with their line items, totals and dates, linked to the customer by Shopify ID; the buyer’s contact details are not kept on orders
- Customers: Shopify ID, name, email and first-seen date
- Products, variants and inventory
- Activations: which customers were tagged or sent to Klaviyo, and when
- Your Klaviyo list ID and private API key, and your settings
Read but not stored: Marketing consent, which is read live from Shopify each time you activate an audience.
When an app has order access, the import copies each order with its line items, totals, tax lines, discount codes, tags, note, note attributes and Shopify’s risk recommendation. Buyer details are kept only while an app on your store needs them: the buyer’s name, email, phone and shipping and billing addresses only while Local Delivery Sheet or Invoice & Packing Slip is installed, and the customer’s name and email (on the customer record) only while Reorder Predictions, Local Delivery Sheet or Invoice & Packing Slip is installed. Otherwise orders are stored without contact details and customers as a Shopify ID only, and the import does not ask Shopify for those fields. The stored copy of what Shopify sent never keeps the buyer’s contact, browser or device details.
Customer data
The app keeps customer name and email, and needs Shopify’s protected customer data approval for them. It does not ask Shopify for phone numbers or addresses and does not store them; if another Happify app on your store needs them (Local Delivery Sheet, Invoice & Packing Slip), they are kept for that app and not shown here. SMS and WhatsApp consent is not used today.
Changes the app makes in Shopify
- Customer tags (repeatiq:* status tags and repeatiq:vip)
Who else receives data
| Recipient | Purpose | Data |
|---|---|---|
| Klaviyo (your account) | Audiences you send | Email address plus repeatiq_status, repeatiq_product_id, repeatiq_due_date and repeatiq_days_since_purchase, only for customers subscribed to email marketing. |
| Anthropic (Claude API) | AI model provider for Explain (Pro) | Product title, status, days since last purchase, reorder window and purchase count. No customer identifiers. We do not store the prompts or answers. |
Hosting is on Vercel and Supabase, listed on our Sub-processors page. We do not sell data or use it for advertising.
Storefront, checkout, POS and Sidekick
- Sidekick answers contain product-level counts only, with no customer names or contact details.
- The “RepeatIQ replenishment” theme block shows only the text you enter and reads no customer data.
Uninstall and privacy webhooks
Shopify sends every app these mandatory webhooks. This is what the app does with each.
| Webhook | What happens |
|---|---|
| app/uninstalled | Marks the app as uninstalled and its subscription as cancelled, and stops syncing for it. Nothing is deleted at this point: Shopify sends the shop redaction request below 48 hours later, and any other Happify app on the store keeps working meanwhile. |
| customers/data_request | Logged on receipt. We prepare the customer’s data by hand and send it to you, the merchant, within 30 days. |
| customers/redact | Removes the customer’s name and email from the customer record; their name, email, phone and addresses from their orders; their contact details from Local Delivery Sheet run stops, along with any proof of delivery photo or signature for those stops; stored webhook records about them; and their email address wherever it was logged as an email recipient. Order lines and totals stay, so your sales history still adds up. |
| shop/redact | Deletes this app’s data for your store: its installation and encrypted access token, subscription record, settings, app-specific data (such as delivery runs and proof of delivery, zones, internal order notes), audit log entries and webhook records. The shared store data (products, inventory, orders, customers) is deleted too when no other Happify app is installed on the store. If one is, the shared data stays for that app, cut down to the customer details it needs. |
Retention
- This app’s data is deleted when Shopify sends its shop redaction request, 48 hours after the app is uninstalled. Shared store data is deleted then too, unless another Happify app is still installed on the store; in that case it is deleted with the last app’s redaction.
- There is no fixed expiry for synced data while an app is installed; inventory snapshots and order history build up over time because history is what the analysis uses.
- Webhook payloads are emptied as soon as they have been processed; a delivery that failed keeps its payload for troubleshooting. Webhook delivery records are deleted after 30 days.
- Audit log entries are deleted after one year, except saved settings and zone versions, which are kept while the app is installed so you can restore them. Audit entries do not record customers’ email addresses.
- Encrypted database backups are deleted 90 days after they are taken, so data deleted from the live database can remain in a backup for up to 90 days.
Security
- Shopify access tokens are encrypted at rest (AES-256-GCM). Database tables are reachable only from our servers; the browser never talks to the database.
- Inside Shopify admin the app identifies your store from Shopify’s signed session token on every request. It never trusts a store name passed in a URL.
Requests and questions
To ask for a copy of your store’s data, or to have data deleted sooner, use the support form with the topic “Data, privacy or deletion”, or email admin@happifyapps.com. Settings in the app also has a “Download account data” button.