Privacy Policy

Last Updated: August 31, 2026

1. Introduction

DemandDeck ("we," "us," or "our") provides a service for Shopify merchants to capture and manage customer interest in unstocked products and to analyse on-site search behaviour. This policy explains our data practices for both merchants and their customers.

2. Data Collection

Customer Information: When you join a waitlist on a merchant's store, we collect your email address, the product you searched for, and your IP address (for security purposes).

Search Intelligence (V2): With merchant consent via Shopify's Web Pixel and Protected Customer Data scopes, DemandDeck Search Intelligence collects anonymised storefront search and recovery events. This includes free-text search queries (display and normalised forms, length-capped, not PII-scrubbed), result counts, product identifiers from search results, recovery impressions and clicks, and checkout line items needed for strict product-level attribution. Browser client identifiers are HMAC-hashed before storage; we do not store raw Shopify client IDs.

Merchant Information: We store shop details and internal settings required to run the DemandDeck Search Intelligence dashboard, including catalog index metadata derived from product webhooks.

3. How Data is Shared and Used

Important for Customers: By joining a waitlist, you understand that your email and request data are made available to the Merchant (the store owner). The Merchant may export this data to manage their inventory or to contact you directly regarding your specific product request.

We use your data strictly to facilitate the waitlist notification process. Emails are sent via the Resend transactional service. We never sell customer data to third-party advertisers.

Local device storage: To make the waitlist experience faster, the merchant may choose to remember your email on this device only so that the form can be pre-filled the next time you join a similar waitlist. This preference is optional, can be turned off directly in the popup, and does not give DemandDeck Search Intelligence or the merchant access to your browsing history.

4. Data Retention and Deletion

We adhere to high data hygiene standards:

Automatic Purging: Stale waitlist requests are automatically removed from our active systems after 90 days if the item has not been sourced. Search Intelligence metrics and journey touches are retained according to the merchant's plan tier (30/180/365 days) and technical retention windows described in our developer documentation.
Merchant Control: Merchants can delete specific requests or wipe their entire account data at any time.
Shopify GDPR webhooks: shop/redact removes all shop data including V2 Search Intelligence models and waitlist queues. customers/redact removes waitlist rows matched by email; anonymised search journey data keyed by hashed browser client IDs is not email-linked and is purged by retention policy and shop-level deletion.
Data Protection Standards: We fully comply with mandatory Shopify data requirements, including redaction and data access requests.

5. Your Rights (Opt-Out)

Every notification email sent by DemandDeck includes a functional Unsubscribe link. Clicking this link will immediately remove your email from receiving any further notifications from that specific store through our service.

6. Contact Us

For data access requests or privacy concerns, please contact us at support@demanddeck.app.