Geosort Privacy Policy

Last updated: 2026-10-06

What we collect

Geosort sorts the products inside a merchant's Shopify collections, per country, and reports how those collections sell. To do that it receives the following from Shopify and from the merchant's storefront:

• Order line items: order ID, product ID, quantity, price and the shipping country code (ISO-2). Aggregated into per-product, per-country, per-day sales figures. We do not store customer names, emails, addresses or phone numbers.
• Catalog data: collections, products, tags, inventory levels, markets and publish dates.
• Merchant settings: the sorting rules and other configuration the merchant creates in Geosort.
• Merchant account data: the store's domain and name, the name and email of store staff who open Geosort (provided by Shopify), and any notification emails the merchant enters. If a Geosort partner agency introduced the store, also the brand, domain and contact details that partner gave us.
• Storefront activity, through the Geosort app embed and Web Pixel: which collections and products a visitor saw and clicked, add-to-cart and checkout events, and the visitor's country. Events carry a random session identifier stored in a first-party cookie (_geosort_sid, one year) and on the cart. It is generated in the browser and is not linked to the customer's name, email or Shopify account.
• Wishlist personalisation, only if the merchant turns it on. For a signed-in customer, Shopify tells Geosort their customer ID so we can fetch the products they saved in the merchant's wishlist app and move them up the collection. That list is cached for at most 6 hours and not stored in our database.
• Email marketing feeds, only if the merchant connects their own Klaviyo or Braze account. When a customer starts a checkout or places an order, Geosort uses the email on it to write that customer's per-country product list into the matching profile in the merchant's account. We keep only a keyed hash of the email and the platform's profile ID, so we can update or delete that link later; the email address itself is not stored.

What we do not collect

• Customer names, emails, postal addresses or phone numbers are not stored. The one exception is a keyed hash of the email for the email marketing feeds, described above.
• Payment details (handled entirely by Shopify).
• Visitor IP addresses are not stored with storefront events; they are used only briefly to limit abusive traffic.

Where data is stored

On Amazon Web Services in the European Union (Ireland). Connections to Geosort use TLS, and the database and file storage are encrypted at rest. Shopify access tokens stay on our servers and are never sent to the browser. The Geosort staff back office requires two-factor authentication.

Data retention

• While Geosort is installed: raw storefront activity is kept for 180 days, archived copies of it for 12 months, and the daily sales and engagement figures built from them for 25 months. Catalog data and settings are kept only while Geosort is installed.
• On uninstall the store is marked deleted immediately. Shopify sends the shop/redact webhook 48 hours later, and we then delete the store's records from our database. Archived copies of its storefront activity are deleted automatically within a few days of that.
• Shopify's order webhook includes the customer's name, email and address. We read the order lines and country codes from it and discard the rest before it enters our processing queue, so only the fields listed under What we collect are kept.
• Database backups expire after 7 days. Application and security logs are kept for 12 months.

GDPR / CCPA

We respond to Shopify's mandatory privacy webhooks:

• customers/data_request and customers/redact: Geosort stores no customer names or contact details. Checkout events keep the Shopify order ID only to attribute sales to collections. If the merchant uses the Klaviyo or Braze feeds, a customers/redact deletes our hashed record of that customer; the profile in the merchant's own account stays under the merchant's control.
• shop/redact: we delete the store's records as described under Data retention.

Service providers

We do not sell data or use advertising networks. These providers process data on our behalf:

• Shopify: the platform Geosort runs on.
• Amazon Web Services: hosting (EU, Ireland).
• Resend: the emails Geosort sends (reports, A/B test results, referral invitations a merchant asks us to send, and sign-in links for Geosort staff).
• Klaviyo: emails to merchants about Geosort (onboarding, product updates).
• Crisp: the support chat inside the Geosort admin; it receives the store domain and what the merchant writes.
• Swish: only when the merchant enables wishlist personalisation; see above.
• IONOS: hosts the info@geosortapp.com mailbox.
• Google Fonts: an icon font on the Geosort admin home page, loaded by the merchant's browser.

Integrations a merchant turns on (for example their own Klaviyo or Braze account, or a wishlist app) receive the data that integration needs, on the merchant's instruction.

Contact

Questions: info@geosortapp.com