Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This page describes what the document states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability may vary by jurisdiction. Methodology
This policy explains how Shopify handles your personal information, including the fact that connecting a third-party email inbox (like Gmail) lets Shopify read and collect the actual contents of your emails to show you order details in the Shop app. If you are a merchant and close your store, Shopify holds onto your store data for two full years before it begins deleting it. You can request access to, correction, or deletion of your personal data, and Shopify will not charge you more or treat you differently for making those requests.
This document establishes the conditions under which Shopify collects, uses, retains, shares, and protects Personal Data across its services, including the Shop app. Shopify commits to collecting email content from connected third-party inboxes to surface order information, retaining merchant store data for two years following closure or termination before initiating deletion, and retaining all Personal Data only as long as necessary for its collected purpose. Third-party sharing is limited to user permission or legal compulsion, cross-border transfers are disclosed as possible, sensitive Personal Data requires specific consent or a lawful basis, and Shopify commits that it does not 'sell' Personal Data as defined under US Privacy Laws. Users are afforded stated privacy rights without financial penalty or service degradation for exercising them, and machine learning processes either involve human oversight or are limited to non-legally-significant effects.
Connecting a third-party email inbox to the Shop app means Shopify collects the actual content of those emails, not just metadata, to identify shopping-related messages and display order history. Your Personal Data will not be shared with third parties unless you give permission or Shopify is legally required to do so, and Shopify will notify you in advance of any legally compelled disclosure unless it is legally forbidden from doing so. You have the right to request access to, correction, amendment, deletion, portability, restriction of, or objection to certain uses of your Personal Data, and exercising any of those rights will not result in additional charges or a reduced level of service from Shopify.
Which mapped governance frameworks each document engages, tied to the specific provisions that engage them.
1 important change detected
3 versions captured · Last updated: July 2026
Every distinct legal provision identified in this document. Featured provisions appear above with analysis.
Shopify has updated this document before. Monitor includes same-day alerts, structured change summaries, and monitoring for up to 20 platforms.
Need provision-level monitoring and regulatory mapping? Insight includes governance timelines, drift analysis, and full provision tracking.
Cross-platform context
See how other platforms handle Advance notice before legally compelled disclosure and similar clauses.
Compare across platforms →Governance Monitoring
Structured alerts for policy changes, governance events, and provision updates across 352+ platforms.