Savepoint — backup & restore for Shopify

Privacy Policy

Effective October 16, 2026

Savepoint ("the app", "we", "us") is a backup and restore app for Shopify stores, operated by Anchor Apps. This policy explains what data the app handles, why, and what happens to it. The short version: we store an encrypted copy of your store's catalog and content so you can restore it, we never collect your customers' names or contact details, and everything is deleted when you uninstall.

Data we collect and why

  • Store information — your shop domain, store name, and the store owner's email address. We use the address to send backup and restore alerts, and a summary of your backups that comes weekly unless you change it. A summary can name one of your products that we backed up, with a link to see what we would restore. We also email you when a customer's data request is ready in the app; that email does not name the customer. Every summary links to a page where you can change how often it comes or stop it.
  • Store content, for backups — products (including variants, images, and metafields), collections, inventory levels, pages, blogs, navigation menus, uploaded files, discounts, and your published theme's files. This is the entire purpose of the app: keeping a copy so you can restore it.
  • Operational records — backup/restore/export activity logs and change notifications from Shopify (webhooks), so hourly checkpoints and the audit trail work.
  • Email activity — whether our emails are opened and which links in them are clicked. Our email provider, Plunk, records this with a small image in each email and by sending links through its own address first. For each open or click it logs the time, the IP address, and the browser or mail app used. Links in the summary also pass through our own address, where we record which link was clicked, which summary it was in, and the browser that clicked it. A link to one of your products carries its ID number, never its name. We use this to find out whether the emails are useful to you. Turning off images in your mail app stops the open tracking.
  • Order records, once order backup is on: order numbers and IDs, line items, prices, discounts, taxes, shipping method and cost, payment and fulfilment status, dates, tags, notes and custom attributes. We do not request the customer who placed the order, not even their Shopify ID. We back them up so you can verify and export your orders and put back their tags, notes and custom attributes, and we use them for nothing else. A deleted order can't be brought back. Order backup is off until you turn it on; until then, no order data reaches us. For your customers' data we act as your processor under our Data Processing Agreement.
  • Support messages — what you send from the app's Support page, and the address you want the reply at. We keep them with your store's records, so they are deleted when you uninstall. Each one is also emailed to our support mailbox, where it stays as ordinary correspondence, the same as an email you send us directly.

Data we deliberately do NOT collect

  • No customer contact details. Savepoint never collects your customers' names, email addresses, phone numbers or postal addresses, and does not back up customer records. Shopify withholds those fields from our access level.
  • No payment or banking information — billing is handled entirely by Shopify.
  • No analytics trackers or advertising cookies in the app. The only cookies used are the session cookies the embedded app needs to work. Our emails do carry open and click tracking, described above.

How backups are stored

  • Every backup is encrypted before it is written to storage (AES-256-GCM envelope encryption with a unique data key per store).
  • Encrypted backups are stored with two independent storage providers (Backblaze B2 and Cloudflare R2) so a failure at one provider can't lose your data.
  • The app itself runs on infrastructure operated by Hetzner. Emails are delivered through our email provider, Plunk, which sends them using Amazon Web Services. Our support mailbox is hosted by Microsoft.

Who processes data for us

  • Hetzner Online GmbH: app servers and database, Finland.
  • Backblaze, Inc.: primary backup storage, United States.
  • Cloudflare, Inc.: second backup copy and network.
  • Plunk, on Amazon Web Services: delivers our emails to you. It receives your contact address and what the email says, which can include the name of one of your products. It never receives your customers' data.
  • Microsoft: hosts our support mailbox. It holds the messages you send us, never your customers' data.

Where data leaves the EU or UK, these providers are bound by the European Commission's Standard Contractual Clauses. We announce any new provider for your customers' data inside the app at least 14 days before it starts.

Retention and deletion

  • Backups are kept for the retention window you choose in Settings (30, 90, or 365 days depending on plan) and then deleted from both storage providers automatically. The latest copy of an order is kept for as long as the order exists in your store. Older copies follow the same window. An order you delete goes after the window, once we have confirmed it is gone from your store.
  • When you uninstall the app, Shopify sends us a deletion request and all of your data — database records and every backup object at both storage providers — is permanently purged within 48 hours.
  • We honor all of Shopify's mandatory privacy webhooks (customers/data_request, customers/redact, shop/redact). When one of your customers asks Shopify for their data, we send you the data we hold for the orders Shopify names, within 30 days. When one asks to be erased, we delete those orders, backups included, within 30 days.

Your data belongs to you

You can export a complete copy of any backup (JSONL, JSON, or CSV) at any time, on any plan, from the app's Download page — no support ticket required.

Sharing

We do not sell, rent, or share your data with anyone. Data is only processed by the providers named above, strictly to run the service. We would disclose data only if legally required. If we ever learn of a breach affecting your data, we tell you within 72 hours.

Contact

Privacy questions or requests: [email protected]. We answer data requests within 30 days.

Changes

If this policy changes materially we'll update the effective date above and, for significant changes, notify you inside the app.