IntentSea Search security and data handling

IntentSea Search uses Shopify-authenticated admin requests, scopes app operations to the authenticated shop, and does not request access to customer records or the Orders API. Storefront purchase analytics are handled by a Shopify pixel declared for analytics and subject to the shop's customer-privacy consent settings.

Shopify access and store boundaries

Admin loaders and actions authenticate through Shopify. App routes use the shop from that authenticated session when reading or changing app settings. The app requests product, inventory, theme, publication and translation access needed for search setup and catalogue features, plus scopes needed for the app proxy and privacy-aware web pixel. It does not request read_orders, write_orders or write_products.

Search catalogues, settings and analytics are scoped to each shop. Data from one merchant is not shown to another. Product unit costs, when a merchant enables margin ranking, are private ranking inputs and are not included in storefront responses.

Storefront analytics and consent

The Shopify web pixel listens for add-to-cart and completed-purchase events. It is declared for analytics only, checks Shopify's Customer Privacy API before sending events where consent is required, and does not read customer names, email addresses, phone numbers or postal addresses. The app does not request Shopify's protected customer data or read_orders scope. See the privacy policy for event fields, browser storage and retention details.

Retention and deletion

Raw search interactions and pixel events are kept for 180 days. Product catalogue and collection data are kept while the app is installed. Shopify sends the shop-redaction webhook 48 hours after uninstall; the app then deletes shop sessions, catalogue records, settings, sync jobs and the runtime tenant. A reinstall before that webhook is processed prevents deletion of the active installation's data. A limited billing-trial record is retained to prevent repeated trial abuse, and older encrypted backups are deleted within 30 days. For details, see privacy and data retention.

Reporting a concern

Email [email protected] with a security or data-handling question. Shopify's official references: admin authentication, privacy-law compliance webhooks, and web-pixel privacy.