Uninstalling & your data

This article explains exactly what data Crossdock holds, what happens to it when you uninstall, and how Crossdock responds to GDPR data requests involving your customers.

What Crossdock stores about your store

Crossdock is designed to store the minimum data it needs to run sync reliably. At v1, the data Crossdock holds consists of:

• Square↔Shopify ID mappings — the internal link between each Square catalog item and its corresponding Shopify product or variant. These are identifiers only (no product names, descriptions, or prices are stored in Crossdock’s database).
• Content hashes — short cryptographic fingerprints of the last-synced state of each product, used to detect drift without re-reading the full catalog. No product content is stored in plaintext.
• Sync configuration — your markup formula settings, rounding preference, and primary Square location ID.
• Audit log entries — an append-only record of sync events for operational support and debugging. Retained for 24 months, then purged.
• Square OAuth tokens — encrypted at rest using AES-256. Required to call the Square API on your behalf. Revoked and deleted when you uninstall or disconnect Square.

Crossdock does not store customer email addresses, names, shipping addresses, or payment details in its own database. Customer data passes through Crossdock only at the moment an order is pushed to Square — it is never persisted.

All data is stored in US-based infrastructure (Neon managed Postgres, Upstash Redis, Render compute — all US regions).

What happens when you uninstall Crossdock

When you uninstall Crossdock from your Shopify Admin, Shopify sends an uninstall webhook immediately. Crossdock processes this and revokes its Square OAuth grant so it can no longer call either API on your behalf.

Per Shopify’s GDPR requirements, Shopify sends Crossdock a shop/redact webhook approximately 48 hours after uninstall. Crossdock adds an additional 48-hour grace period on top of that, giving a total window of roughly 96 hours from uninstall before all shop-scoped sync data is permanently deleted. During the grace period you can reinstall Crossdock and your sync mappings will be restored; after the purge a fresh install starts from a clean slate.

Products already synced to Shopify at the time of uninstall are not deleted from your Shopify store. Crossdock only removes the data it holds in its own database. Your Shopify catalog and inventory remain exactly as they were.

Customer data requests (GDPR)

If a customer submits a data access or erasure request through your Shopify store, Shopify forwards a customers/data_request or customers/redact webhook to Crossdock. Because Crossdock does not persist customer PII (see above), the response is straightforward:

• Data request — Crossdock fulfills the request within Shopify’s 30-day window. At v1, because Crossdock holds no customer name, email, or address, the response is an encrypted export confirming that no identifiable customer data is stored.
• Erasure request — Crossdock purges any order-level identifiers (Square order IDs) linked to that customer. Because no PII is stored, no further action is required.

These GDPR webhooks are mandatory endpoints that Crossdock implements and monitors. All three webhook types (customers/data_request, customers/redact, shop/redact) are handled and logged in the audit trail.

Data retention summary

• Sync mappings and hashes — purged ~96 hours after uninstall (48h Shopify window + 48h Crossdock grace).
• Audit log entries — retained 24 months from creation, then deleted.
• Square OAuth tokens — revoked at uninstall; the encrypted ciphertext is deleted with the rest of the shop data during purge.
• Customer PII — not stored. Nothing to purge.