Data deletion requests

How to request deletion

E-mail info@northmast.app with the subject "Data deletion request". There is no form and no third-party tool — a plain e-mail is enough. We may ask for information to confirm that you are entitled to make the request, so that we never delete or disclose data on someone else's behalf.

What to include in your request

• The Shopify store domain the request concerns (for example your-store.myshopify.com).
• Whether you are the merchant (store owner or authorised staff) or a customer of that store.
• Which data the request concerns: all store data, the advertising platform connection, or specific orders.
• A reply address we can use to confirm completion.

Processing period

We process verified deletion requests without undue delay and at the latest within 30 days of receiving them. Deletion requests that Shopify passes on to us are processed automatically.

Keeping a copy before you uninstall

While the app is installed, you can download the exports it offers: your profit and dashboard reports, and your product costs, product information, suppliers, supplier purchasing conditions and inventory planning data as files. You can also download the document of each purchase order and each attachment individually. Other records can be viewed in the app but are not offered as a file export, and nothing can be exported after the app has been uninstalled.

When you uninstall the app

When you uninstall the app, our access to your store ends and the Shopify session records for your store — which hold the staff account details and access tokens — are deleted immediately. Shopify then asks us to delete the rest of your store's data, normally 48 hours after the uninstall, and we delete it when that request arrives. We do not wait for it indefinitely: if Shopify's request does not reach us, we verify the uninstall ourselves and delete the remaining store data no later than 30 days after the uninstall, unless the law requires us to keep something, in which case we keep only what that law requires.

This covers all data the app holds for your store, including the files attached to your stock counts and supplier invoices. The Privacy Policy lists every category.

If your store is permanently closed

If your Shopify store is permanently closed or deleted, Shopify normally notifies us in the same way as when the app is uninstalled, and your store's data is deleted as described above. If, exceptionally, that notification does not reach us, we delete your store's data once we have confirmed that the store has been permanently closed or deleted, with the same legal exceptions. A temporary problem — such as an outage, a paused or frozen store, an expired or invalid access token, or a store website that cannot be reached — is never on its own treated as a closure.

Advertising data (Meta Ads and Google Ads)

• Meta-related data: disconnecting Meta in the app stops all further imports and deletes the stored (encrypted) access token, the selected ad account details and any pending authorization state. Meta advertising cost data that was already imported is not deleted by disconnecting; it stays in the store's reporting history for at most 24 calendar months. A deletion request as described above also deletes that imported Meta advertising cost data, separately from the store's other data. Disconnect Meta first: while it is connected, the next synchronisation would import that data again.
• Google Ads-related data: disconnecting Google Ads in the app asks Google to revoke the token, stops all further imports and deletes the stored (encrypted) access and refresh tokens, the selected Google Ads account details and any pending authorization state. Google Ads cost data that was already imported is not deleted by disconnecting; it stays in the store's reporting history for at most 24 calendar months. A deletion request as described above also deletes that imported Google Ads cost data, separately from the store's other data. Disconnect Google Ads first: while it is connected, the next synchronisation would import that data again.

Requests from your customers

Customers of a store can also contact the merchant directly; Shopify then passes the request on to us and we complete it automatically.

Requests from a customer to delete their data delete the order data concerned and prevent it from being imported again. Our own billing records for usage-based charges contain no customer details; for each order covered by such a request we remove the order identifier from its billing record, as described in the Privacy Policy.

Data we may have to retain

Where applicable law requires us to keep something — for example records under tax or accounting law — we keep only what that law requires, for as long as it requires, and continue to protect it as described in the Privacy Policy. When order data is deleted at a customer's request, we keep only the identifiers of the orders concerned, so that a later synchronisation cannot import them again; completed requests for a copy of a customer's data are kept at most 30 days. Independent of any request, detailed order data and advertising cost data are deleted automatically after 24 calendar months, the reporting horizon they share.

Our own billing records for usage-based charges follow the retention described in the Privacy Policy.

The service includes a daily backup of the database, and each backup is kept for 7 days. Backups exist to restore the service after an incident, not to recover records or files you deleted yourself. Data deleted from the app can remain in a backup until that backup expires. Uploaded files are not part of these backups.