ClientelingWhat is Clienteling?What is RFM Scoring?The Practical GuideFor Shopify BoutiquesPlansPricing

Privacy Policy

Last updated: March 2026

We don't store your regulars' personal information. Names, emails, and phone numbers stay in Shopify — we just read them at runtime. Here's the full picture.

Your data

What we store — and what we don't

We store aggregate data only: Shopify OAuth session tokens, order counts, total spend, RFM segment scores, and product catalog info (titles, types, variants). We store sync progress metadata per shop — status, progress, and timestamps — to track data imports; this is deleted within 30 days of uninstalling, as part of our mandatory shop data redaction process. We also store AI-generated intelligence per customer — text summaries of shopping insights, loyalty signals, and engagement opportunities, along with generation metadata like version and order snapshot counts — derived from aggregate order data, not personal information. We also store engagement outreach suggestions — pre-written email subjects, email bodies, and SMS messages tied to engagement triggers — which may contain template placeholders but never actual personal data. We also store AI-generated campaign proposals — shop-level action recommendations with segment targeting, estimated ROI ranges, and sample outreach messages — used to suggest marketing campaigns to merchants. We also store merchant-defined business goals — short text goals that merchants set to guide AI-generated recommendations. We also store analytics event deduplication metadata — used to avoid duplicate analytics events. These are numbers, IDs, and generated text — not identities.

We never write names, email addresses, phone numbers, or shipping addresses to our database. When your team views a regular's profile, that info is fetched from Shopify's API in real time and never stored on our servers.

Third-party services
  • Shopify — API access using the scopes you grant at install (read regulars, full order history across all sales channels, products; write tags)
  • Supabase — PostgreSQL database for aggregate data and RFM scores; Supabase Auth for admin dashboard authentication
  • Vercel — application hosting
  • PostHog — product analytics via /ingest reverse proxy. We send shop identity, plan metadata, and usage events. No individual customer data is sent.
Your rights

You can request a copy of your data or ask us to delete it. Uninstalling the app revokes our API access immediately. Questions? Reach out at hello@engageretail.io.

Learn more about what clienteling is or how Engage Retail works inside Shopify.