Your data and privacy

What ThanksTo stores

From orders: the order number, totals and refunds, discount codes, sales channel, payment status, product titles and quantities, how many orders the customer has placed, Shopify’s customer id, and where Shopify says the shopper came from.
From visits, for shoppers your privacy settings allow: a visitor id, pages and products viewed, add to cart and checkout steps, the referring site, the landing page with its campaign tags, the type of ad click, browser, operating system and device type, a rough location (country, region, city, and coordinates rounded to about 1 km), and a one-way hash of the checkout token.
From the cart helper, if you turn it on: for shoppers who allow analytics, the creator tag, campaign tags, visitor id and type of ad click. The ad click id stays on the Shopify order, in hidden _thanksto_ attributes.
From the survey, if you add it: each answer, any text the shopper typed, and its order.
About creators: the names you enter, their links and discount codes, and their results.
About your shop: your shop’s details, including the owner’s email, for account notices and for the weekly email if you turn it on.

When a shopper declines, the pixel and cart helper record nothing for that visit. The order still arrives from Shopify with any source Shopify recorded, and ThanksTo can credit it from that. With no source, it shows as Not tracked.

What ThanksTo doesn’t store

Shoppers’ names, email addresses, phone numbers or postal addresses, unless a shopper types one into a survey answer.
IP addresses. ThanksTo uses them briefly to work out a rough location and to limit abuse.
Ad click ids.

The visitor id and the cart helper’s last tagged link stay in the shopper’s browser storage. Cookie rules can cover browser storage too, so include ThanksTo in your store’s cookie notice. Your store’s privacy notice and cookie settings are your responsibility, including having a lawful basis to collect visit data. See the Terms of service.

The app doesn’t request access to Shopify customer records. ThanksTo doesn’t sell data, use it for advertising, or combine it across stores.

How long ThanksTo keeps data

90 days: raw events, such as a page view.
120 days: records that help credit an order when it gets paid.
2 days: records linking a checkout to its visit.
400 days: visits. A visit that credited an order is kept with that order.
While ThanksTo is installed: orders and survey answers.

Delete data

When a shopper asks about their data:

Ask the shopper to send the request to your store, not ThanksTo.
In your Shopify admin, open Customers and select the customer. Under More actions, choose Request customer data or Erase personal data.

To delete data: Shopify can take 10 days or longer to pass the request to ThanksTo. ThanksTo then deletes the visit data, cart details and survey answers linked to that customer’s orders, and removes their customer id. The order’s totals, discount codes and products stay.
For a copy of data: ThanksTo answers you, the merchant, within 30 days.

For a copy of your store’s data, or its deletion, email support@thanksto.app at any time. If you uninstall, Shopify asks ThanksTo to delete your store’s data about 48 hours later, and ThanksTo then deletes all of it.