Last updated: 6 October 2026
This policy describes how AVERYNZA, operated by TAJHERA VENTURES, processes information when a Shopify merchant installs and uses the app.
Information processed
When a merchant authorizes AVERYNZA, Shopify provides the shop identity and an access session used to make authorized Admin API requests. The app uses the read-only read_orders and read_returns scopes. When a merchant explicitly runs an analysis, AVERYNZA requests the Shopify order history available to these scopes (up to 60 days) and stores relevant order, refund, and return fields. Shopify webhooks provide new activity after installation.
Shopify authorization session records are stored in the application database. They contain the shop domain, the access token and its scope, and expiry details. Where Shopify supplies them for a signed-in merchant staff member, a session record may also contain that person's Shopify user ID, first and last name, email address, locale, and account-owner and collaborator flags. This information is stored only so the app can maintain authenticated Shopify sessions and make authorized Admin API requests for the shop. AVERYNZA does not use it for marketing, advertising or analytics, and it is deleted with the shop's session records on uninstall or shop redaction.
Stored fields can include shop, order, refund and return identifiers; order numbers; dates; financial and fulfillment status; amounts and currencies; line-item identifiers, titles, SKUs and quantities; refund and customer IDs included in webhook events. Customer IDs may be used to group related activity and fulfill privacy requests. Free-text refund notes and reasons are discarded before persistence. Customer names, email addresses, phone numbers, postal addresses, IP/browser details and note attributes are removed by the app's payload sanitizer before webhook payloads are stored.
How information is used
AVERYNZA uses store data to calculate deterministic refund metrics, identify potential patterns, create findings with supporting evidence, and show review guidance to the merchant. Financial values are calculated by application logic. Findings are indicators for human review, not accusations or automated decisions about customers or staff. AVERYNZA does not issue refunds or modify orders, products, or payments.
The current application does not send merchant data to a third-party AI, advertising, or analytics service. The data is processed by Shopify and the application infrastructure used to operate AVERYNZA.
Storage and retention
Store records and Shopify authorization sessions are stored in the application database. Order, refund, webhook, finding, evidence and related audit records are subject to a 455-day operational retention horizon when the production retention setting is configured and the scheduled purge is running. The application does not verify that a production schedule is active. Merchant settings are not removed by routine operational retention.
On app uninstall, or when Shopify sends a shop redaction request, AVERYNZA deletes the shop's app records, including findings and settings. Customer redaction requests remove matching customer-associated records. Matching records needed for an outstanding customer data request are preserved until the merchant marks the export provided; completed requests no longer exempt those records from normal retention. Privacy requests and redactions take precedence where required.
Customer data requests
Shopify customer data request webhooks are recorded for the merchant. The authenticated AVERYNZA app provides a customer-data-request screen where the merchant can review a request and download the available matching application records as a JSON export. The merchant remains responsible for responding to the request through the appropriate Shopify process and within applicable deadlines.
Disclosure and security
AVERYNZA does not sell store data or use it for advertising. Shopify processes authorization and platform data; the hosting and database providers configured for the service process data to operate the app. Access is tied to Shopify authentication, and Shopify webhooks are verified using Shopify's webhook authentication mechanism. The service is intended to be accessed over HTTPS. No method of storage or transmission can be represented as risk-free. Encryption at rest, including database and backup storage, requires separate infrastructure verification and is not established by application code.
Your choices and contact
Merchants can uninstall AVERYNZA from Shopify to stop future access and trigger deletion of the app's shop data. For privacy questions or help with a request, contact AVERYNZA at support@averynza.com.