What Semafor keeps, what it shares with other stores, and how you delete it — in plain words, written from the app’s code.
Only what fraud checks and reminders need. Card and payment details never reach Semafor — Shopify does not give them to apps.
The people you add: e-mail, phone, name, address or device, the reason, your note and the order. It stays until you remove it.
For each new order: the light (green, yellow, red), what matched and what Semafor did — a tag, hidden payment, a cancellation. Deleted after 12 months.
What the buyer types in checkout, the cart, a random device ID kept in their browser, a browser fingerprint (screen, language, time zone) and the IP. Deleted after 120 days.
The e-mail a visitor leaves in your pop-up, with the device ID, language and page. The visitor is added to your Shopify customers.
Each reminder or welcome e-mail: recipient, subject, the e-mail as sent and whether it arrived — plus who unsubscribed.
Who added, changed or removed an entry, when settings changed, and the privacy requests that came from Shopify. Deleted after 12 months.
The network is on by default. Switch it off in Settings at any time: your store then stops sharing and stops seeing reports from others.
A buyer is affected only if they match your list — or, if you turn it on, enough reports from other stores.
Separately for red and yellow: just flag the order, hide cash on delivery only (card still works), or hide every payment method.
The buyer sees no message saying they are blocked — only fewer payment methods, or none.
Delete the entry under Blacklist: the checkout rule updates at once and your network reports are withdrawn.
Access ends at once. 48 hours later Shopify asks us to erase the store, and its data is deleted: blacklist, order checks, checkout steps, pop-up sign-ups, e-mails, logs, your reports in the network and your unsubscribe list.
Applied automatically: their blacklist entry, checkout steps, pop-up sign-up, e-mails and the checks of their orders are deleted, together with your network reports about them. Anywhere else in your log, their e-mail or phone is replaced with “[redacted]”.
Shopify forwards the request to us. We record it and answer within 30 days.
Checkout steps: 120 days. Order checks and activity log: 12 months. Network reports: 24 months. Your blacklist: until you remove an entry. Clean-up runs every day.
Railway, region US West (California, USA). All traffic to and from Semafor goes over HTTPS.
Sent through Resend (USA). Stores that send from their own domain are set up in Resend’s EU region (Ireland).
MIHAILIUC GROUP SRL, Bucharest, Romania — an EU company under the GDPR. You are the controller of your customers’ data; Semafor processes it for you.
Write to us — you will get an answer from the people who build Semafor.
We use analytics cookies to see how visitors find us. Privacy policy