Encore

Privacy policy

Last updated: July 31, 2026

Encore never stores personal customer data. The recommendation engine needs to know that products were bought together — never who bought them. Everything Encore persists is a product identifier, an order identifier, or an aggregated counter.

What Encore stores

• Shop domain, currency and the merchant's settings — until uninstall.
• Order ids, creation dates, and which products each order contained (product ids and quantities only) — a rolling 60-day window, pruned daily.
• Aggregated co-purchase statistics — recomputed daily.
• A product display cache (title, image URL, price, availability, product classification) — catalog data, until uninstall.
• Offer records: which product was offered on which checkout, the outcome, and the revenue of the single line Encore added. The initial cart's product ids inside these records are cleared after 60 days like all order-line data.
• Anonymized cross-store counters (e.g. acceptance per discount level) with no store identifier, used only when at least 5 stores contributed.

What Encore never stores

Customer names, email addresses, phone numbers, shipping or billing addresses, geolocation, customer ids, order totals (only a coarse band of the ratio between the offer's price and the order value), payment or fulfillment details, notes, or any free-text field that could contain personal data. Webhook payloads are processed in memory; only the fields listed above are extracted, and payloads are never persisted or logged.

Buyer-facing behavior

The post-purchase offer never uses personal data: the product is chosen from the store's aggregated co-purchase statistics, and any discount testing rotates per checkout, never per buyer identity — no profiling, no personalized pricing.

Deletion

Uninstalling Encore deletes every database row belonging to the store, including access credentials. Shopify's shop/redact compliance webhook re-runs the same purge as a safety net. Customer data requests and customer redaction requests are acknowledged immediately — there is no stored personal data to export or erase.

Security

Data is encrypted in transit (TLS between Shopify, the app and the database) and at rest (managed PostgreSQL volume encryption).

Contact

Questions: erdlightllc@gmail.com