Privacy policy

What AlliDesk is

AlliDesk is a Shopify app that gives a store’s customers an account portal (orders, wishlist, loyalty points, referrals, returns, reviews) and gives the merchant the tools to run those programs. The merchant installs it on their store; AlliDesk processes data on the merchant’s behalf.

What we collect

From Shopify, only what the features need: customer name, email, phone and addresses; orders and their items, payment status, fulfilment and tracking; product titles and prices for saved items; inventory levels for alerts. From the portal: what the customer saves, redeems, requests and reviews. From the merchant: their account email, name and the settings they choose. We do not collect payment card details.

How we use it

To show customers their own orders and account, to calculate and record loyalty points, to run returns and exchanges, to send the messages the merchant has switched on (order updates, points, reminders, review requests), to alert the merchant, and to count monthly orders for billing. We do not sell data, and we do not use it for our own advertising.

Who else sees it

Only processors needed to deliver the service: our hosting and database provider, Cloudflare (R2 storage, for pictures a store uploads and for encrypted database backups), the email provider (Resend), MiniMoth (the one-time code a shopper asks for to sign in with a phone number, sent on WhatsApp or SMS; MiniMoth keeps the number for up to 45 days for billing and disputes), Google Fonts (only when a store picks a Google font for its sign-in window: the shopper's browser loads the font from Google, which sees the request and its IP address), and, when the merchant connects them, their WhatsApp or marketing tools (such as Spur, BIK, Interakt or Zapier, which receive the events the merchant picks, with the customer's name, phone and email), and courier accounts, which receive only what a message or a pickup needs.

How long we keep it

The merchant’s own records — orders, invoices, reviews, points and warranties — are kept for as long as the store has the app installed, because they are the books the merchant is asking us to keep. When a store uninstalls, all of its data is deleted within 48 hours of Shopify’s shop-redact request, and customer redact webhooks are honoured automatically. For a customer data request, everything AlliDesk holds about that customer is emailed to the store’s contact address so the merchant can pass it on. Tax invoices are kept as the law requires, with the customer’s contact details removed.

Everything else exists only so the app can run, and is deleted on a schedule by a job that runs every day:

• sign-in codes — 7 days. A one-time code is spent in minutes; a week is only there so a support question can still be answered.
• webhook delivery ids — 30 days. Kept only so Shopify cannot deliver the same webhook twice. After a month it can no longer arrive again.
• expired portal sessions — 30 days. Rows already past their expiry. Held briefly so a revoked session can still be explained.
• account-page activity — 90 days. Counts what customers do in their account, for the merchant's own reports. A quarter is enough to see a trend.
• video views and clicks — 180 days. Feeds the reels report. Six months covers a full season of what sold.
• referral link clicks — 180 days. A click is only useful while a referral can still convert; the attribution window is far shorter.
• message delivery log — 180 days. Proof that an email or message was sent, for disputes. Six months outlasts any of them.

Security

Data travels over HTTPS, and the database and job queue sit on an encrypted volume (LUKS2, AES-256-XTS), so personal data is encrypted at rest as well as in transit. Backups are separately encrypted with AES-256 and every backup is proved decryptable in the run that makes it. An encrypted copy is kept off-site in Cloudflare R2 for 30 days, so data deleted from the app can remain inside those encrypted backups until they expire. The database and its server are reachable only from the application; the database publishes no port at all, and administrative access is by SSH key, limited to the people who operate the service. Requests to the service are logged, and we keep a written procedure for handling a security incident.

Contact

Questions or requests about your data: hello@allidesk.com. Everything else: Support.