Data Retention Policy for PrizeSuite

Last updated: June 19, 2026

PrizeSuite (“we,” “us,” or “our”) is a Shopify app provided by Grimant. PrizeSuite processes merchant, customer, order, giveaway, participation, wallet, points, referral, winner, support, and app activity data to provide app functionality.

This Data Retention Policy explains how long we retain data and when data may be deleted, anonymized, or kept for legal, security, operational, or compliance reasons.

1. General retention principle

PrizeSuite retains personal information and app-related data only for as long as reasonably necessary to:

• Provide app functionality
• Maintain merchant account and store configuration
• Manage giveaways, entries, tickets, participants, and winners
• Provide wallet rewards, points, referrals, and customer reward history
• Support customer-facing My Rewards, Giveaways, and Winners pages
• Provide merchant reporting and operational records
• Troubleshoot issues and provide support
• Maintain security and prevent fraud or abuse
• Comply with legal, tax, accounting, regulatory, Shopify, and platform requirements
• Resolve disputes and enforce our Terms of Service

When data is no longer needed, we delete, anonymize, or otherwise limit it within a reasonable period, unless a longer retention period is required or permitted by law.

2. Merchant and store data

We may retain merchant and store information while the app is installed and for a reasonable period after uninstall.

This may include:

• Store domain
• Store name
• Merchant contact information
• App installation status
• Billing or subscription status
• Plan, trial, and app settings
• Storefront page setup status
• Support communication
• Operational logs related to the store

Some merchant and store data may be retained after uninstall when needed for billing records, security, legal compliance, dispute resolution, fraud prevention, or operational records.

3. Customer and order data

PrizeSuite may process customer and order information needed to provide app functionality.

This may include:

• Customer name
• Customer email
• Customer phone number, when available
• Shopify customer identifiers
• Order identifiers and order-related details needed for giveaway or reward activity
• Giveaway entries and ticket records
• Participant records
• Winner records
• Wallet activity
• Points activity
• Referral activity
• Product review or social action reward activity when enabled
• My Rewards activity

Customer and order data is retained only as long as needed to provide the app, support merchants, maintain records, prevent abuse, comply with obligations, and resolve issues.

4. Giveaway, ticket, and winner records

Giveaway-related records may be retained for a reasonable period because merchants may need them for campaign history, customer support, winner review, dispute handling, reporting, and compliance.

This may include:

• Campaign records
• Entries
• Ticket numbers
• Participants
• Winner selection activity
• Instant win activity
• Giveaway history
• Customer-facing reward history

Merchants are responsible for determining whether their own campaign rules or applicable laws require longer retention of giveaway or winner records.

5. Wallet, points, and referral records

Wallet, points, and referral records may be retained while needed to provide accurate reward balances, customer history, merchant reporting, fraud prevention, and support.

This may include:

• Wallet balances
• Wallet transactions
• Reward requests
• Points balances
• Points ledger or history
• Referral codes
• Referral activity
• Reward status records
• Pending, approved, rejected, or completed reward actions

Some reward records may need to be retained to preserve accounting, transaction history, fraud-prevention checks, and customer support history.

6. Support and communication records

If a merchant contacts support, we may retain support messages and related context for a reasonable period.

This may include:

• Store domain
• Contact details provided by the merchant
• Support message content
• Screenshots or issue details provided by the merchant
• App path or feature affected
• Troubleshooting history

Support records help us respond to issues, improve the app, and maintain operational history.

7. Logs, analytics, and security records

We may retain logs, analytics, diagnostics, and security records for a limited period to operate and protect the app.

This may include:

• Error logs
• App activity logs
• Security logs
• Browser or device information
• IP address
• Usage analytics
• Performance diagnostics

These records are used for troubleshooting, security monitoring, fraud prevention, abuse detection, and app improvement.

8. App uninstall

When a merchant uninstalls PrizeSuite, we may stop processing new app activity for that store, except where needed for legal, compliance, security, billing, operational, or Shopify platform requirements.

After uninstall, we may retain certain data for a reasonable period, including:

• Billing and subscription records
• Security and audit logs
• Support history
• Campaign and reward records needed for disputes or compliance
• Backup records until normal backup deletion cycles complete

Data that is no longer needed may be deleted, anonymized, or limited according to our normal retention processes.

9. Shopify privacy and deletion requests

PrizeSuite responds to applicable Shopify privacy and compliance requests, including customer data requests, customer redaction requests, and shop redaction requests, as required for Shopify public apps.

When we receive a valid deletion or redaction request through Shopify or from an authorized merchant, we process it according to applicable requirements, subject to legal, security, fraud-prevention, dispute-resolution, operational, and backup retention limits.

10. Backups

Some information may remain in backups for a limited time after deletion from active systems.

Backup data is retained for security, disaster recovery, and operational continuity. It is deleted or overwritten according to our normal backup retention cycle.

11. Merchant responsibilities

Merchants are responsible for their own data retention obligations connected to their store, customers, giveaways, promotions, rewards, wallet activity, points, referrals, winner selection, prize fulfillment, tax records, and customer communications.

Merchants should maintain their own policies and records as required by applicable laws and business needs.

12. Changes to this policy

We may update this Data Retention Policy from time to time.

When we update it, we will change the “Last updated” date. Continued use of PrizeSuite after updates means you accept the revised policy.

13. Contact

If you have questions about this Data Retention Policy, contact:

Grimant
Contact page: https://grimant.com/contact/