# Data Deletion (Seleric Integration)

This document explains what data Seleric Integration stores and how deletion works when a merchant uninstalls the app or
when Shopify sends mandatory privacy/compliance webhooks.

## What we store

Seleric Integration stores, at minimum:

- Shopify sessions required to authenticate API calls (shop domain, access token, and related session metadata).

The app is designed so it does **not** need to persist buyer event payloads in its own database to function; events are
forwarded to the merchant-configured PostHog project.

## Uninstall deletion

When the App is uninstalled, Shopify sends an `app/uninstalled` webhook. On receipt, the app deletes shop-scoped stored
sessions.

## Shopify compliance webhooks

The app registers and handles these mandatory topics:

- `customers/data_request`
- `customers/redact`
- `shop/redact`

Because buyer event payloads are not stored in the app database, the compliance handlers respond successfully and delete
any shop-scoped sessions and, where available, best-effort session rows associated with an email included in the payload.

## Data in PostHog

If you enable the Web Pixel to forward events to PostHog, those events are stored in **your** PostHog project according
to your PostHog retention settings. To delete data in PostHog, use PostHog’s deletion tools and retention controls.

## Contact

If you need help verifying deletion, contact support via `/support`.