Data Deletion
Last updated 28 June 2026
This page explains how merchants and shoppers can request deletion of data held by Rately, in line with GDPR/CCPA and Shopify’s requirements.
Shoppers
If you submitted a review, question, or were sent a review request, ask the store you interacted with to delete your data. The merchant can trigger Shopify’s privacy webhooks, which Rately honours automatically:
- customers/data_request — we compile all data we hold for you (reviews, review requests, SMS opt-outs), matched by customer id, email, or phone, and deliver it to the merchant.
- customers/redact — we anonymize your reviews (keeping rating/text but removing your name/email/customer id), null your contact details on requests, cancel pending requests, and delete SMS opt-outs.
You may also email rately@webb9.com and we will coordinate with the merchant.
Merchants
On uninstall, Rately immediately revokes your stored AI provider keys, deletes your sessions, and resets the cached subscription state. Reviews remain in the database only during Shopify’s short uninstall-to-redaction window so privacy webhooks can complete safely. 48 hours after uninstall, Shopify sends shop/redact and we permanently erase all of your shop’s app-managed data.
Deleted data includes storefront reviews stored by Rately, dropship and supplier imports, standard review imports, AI-generated demo reviews, AI-edited review text, review media metadata, Q&A, review requests, settings, AI configuration, chat history, usage ledgers, and audit logs. Because Rately widgets render from app-hosted data, reviews stored only in Rately stop appearing on the storefront after uninstall. CSV exports you downloaded before uninstall remain available to you outside Rately.
Recovery is limited to the period before shop/redact is processed, normally 48 hours after uninstall. After that redaction is processed, active app data cannot be restored by reinstalling.
To delete your data sooner, uninstall the app and email rately@webb9.com to request immediate erasure.
Backups
Encrypted database backups are retained for up to 30 days and then permanently deleted; redacted data is removed from active systems immediately and ages out of backups within that window.