Effective date: 2 July 2026
Last updated: 2 July 2026

This policy describes how long HiveMorph retains your data and what happens
when you uninstall the app or request deletion.

---

1. Retention schedule

Data category	While app is installed	After uninstall
Synced theme files & indexes	Kept current via sync	Deleted within 30 days
Theme dependency graph	Same as theme files	Deleted within 30 days
Version snapshots	Up to 90 days from creation	Deleted within 30 days
AI patches & revision history	Duration of installation	Deleted within 30 days
Audit results (SEO, UX, etc.)	Up to 12 months	Deleted within 30 days
Preview screenshots	Up to 30 days	Deleted within 30 days
Encrypted Shopify access token	Until uninstall	Revoked immediately; deleted within 30 days
Account & organization data	Until account deletion requested	Retained until merchant requests full account deletion
Billing & payment records	7 years	Financial records retained; shop identifiers anonymized
Support tickets & correspondence	3 years	Retained unless deletion requested
Server & application logs	90 days rolling	Auto-purged; shop identifiers removed on uninstall

---

2. What happens when you uninstall

Step 1 — Immediate (on uninstall)

• Shopify sends an APP_UNINSTALLED webhook
• We immediately revoke your Shopify access token
• Connector status set to inactive/disconnected
• No new API calls or syncs are made to your store

Step 2 — Shop redact (48 hours after uninstall)

• Shopify sends a shop/redact webhook with your shop_id and shop_domain
• We queue a full data deletion job for all records associated with your store

Step 3 — Permanent deletion (within 30 days of shop/redact)

The following are permanently deleted:

• All synced theme file content (ThemeFile records)
• Theme indexes, component graphs, and sync run history
• Audit records and findings
• AI patch history and revision threads
• Version snapshots in cloud object storage
• Preview screenshots and export artifacts
• Encrypted Shopify credentials
• Shop-specific application events
• Shop identifiers in usage logs (anonymized where retention is legally required)

Step 4 — Confirmation

• Deletion is logged internally (shop domain + timestamp only — no content)
• Billing records are anonymized (shop identifier removed; charge amounts retained
  for legal/tax compliance)

---

3. Customer data (shopper/buyer data)

HiveMorph does not request Shopify API access to customer or order data.
We do not store Shopify customer personal information.

When Shopify sends:

• customers/data_request — We respond confirming no customer PII is held
• customers/redact — We respond confirming no customer PII to delete

---

4. Merchant-initiated deletion

You may request deletion at any time without waiting for uninstall:

1. Email privacy@hivemorph.com from your registered account email
2. Include your Shopify store domain
3. We verify your identity as the store owner or authorized team member
4. We export your data if requested (within 30 days)
5. We permanently delete all store data within 30 days of confirmation

To delete your entire HiveMorph account (all organizations and stores),
email the same address with “Full account deletion” in the subject line.

---

5. Snapshot and rollback retention

Version snapshots exist to let you roll back theme changes. They are:

• Created automatically before each publish action you approve
• Retained for up to 90 days while the app is installed
• Deleted on uninstall per the schedule above
• Stored in encrypted cloud object storage, separate from the primary database

---

6. Legal holds

We may retain data longer than the schedules above if:

• Required by applicable law, regulation, or court order
• Needed for an active legal dispute or investigation
• Required for tax, accounting, or audit obligations (billing records)

In such cases, data is isolated, access-restricted, and not used for any
other purpose.

---

7. Automated purge

We run automated jobs to:

• Purge application logs older than 90 days
• Delete expired version snapshots older than 90 days
• Delete audit results older than 12 months (while installed)
• Execute shop/redact deletion jobs within the 30-day window

---

8. Contact

Data deletion requests: privacy@hivemorph.com
Support: support@hivemorph.com
Address: HIVE MORPH, London Eve
Riverside Building, County Hall
Westminister Bridge Rd, London SE

7PB, UK