MindFlash StudioLast updated: 9 October 2026
For customers
Contact the store where you placed the order to request your information or deletion. You may also contact support@mindflashstudio.com about app-side processing. The merchant/Shopify process addresses order contents and greeting text; the app's own export covers only its service records.
For merchants: access requests
When Shopify sends an authenticated customers/data_request event, the app creates an app-side report for the order IDs supplied. Open Help, find the request, download the report, verify the recipient and deliver it securely. Mark as provided only after delivery. The download and preparation of the report do not themselves send it to the customer. Request identifiers, customer identifiers, preparation timestamps, usage receipts and webhook metadata can be in the report; Shopify order contents, greetings and staff tokens are excluded.
A list view shows the latest 50 ready reports. Marking one as provided records a timestamp and does not erase its contents. The code has no report auto-expiry. Address the full request within the applicable required timeframe; Shopify's compliance process generally requires completion within 30 days of receipt.
Customer deletion
An authenticated customers/redact event removes app-side records tied to the supplied orders and related customer reports. Store-level aggregate usage and analytics are retained; deletion does not give the store extra Free allowance. Shopify order deletion/redaction remains a separate platform and merchant process.
Store deletion and uninstall
Authenticated app/uninstalled and shop/redact events trigger store-wide cleanup of the app database: sessions, analytics, webhook receipts, preparation/review records, gift usage and privacy requests, including nested report parts. An invalid webhook signature is rejected, and failed processing can be retried.
This cleanup does not delete the merchant's Shopify products, media, orders, theme configuration, downloaded PDFs/reports, physical cards, mailbox or infrastructure logs/backups. Manage those separately under the applicable retention rules. Take needed exports before uninstalling; no guaranteed restore after app database deletion is offered.