Effective Date: September 28, 2026
DarkShepherd is a product of CodeCraftBrew LLC. This policy describes how long DarkShepherd retains merchant and operational data. It supplements the Privacy & Data Protection Policy.
Active Merchant Data
Active merchant account data is retained while needed to provide DarkShepherd.
Investigation Records
Order investigation records may be retained while the merchant account is active so merchants can review investigation history.
Authentication and Session Data
Shopify authentication and session data is retained only as needed to maintain the app connection and operate the service.
Operational Logs
Operational logs are retained only as reasonably necessary for security, troubleshooting, and reliability.
Uninstall and Account Termination
After app uninstall or account termination, DarkShepherd will delete or de-identify merchant and protected customer data under its control within 30 days, unless retention is legally required, needed for a security or fraud investigation, or necessary for an active legal dispute.
Backups
Managed infrastructure backups may retain data temporarily until the provider's normal backup lifecycle expires.
No Indefinite Retention
DarkShepherd does not retain protected customer data indefinitely or for speculative future use.
Contact
Questions about this policy may be directed to DarkShepherd / CodeCraftBrew LLC at jin@darkshepherd.co.