Privacy policy

Last updated October 3, 2026.

Aislekit Backup is a Shopify app that backs up a store's data and restores it. I built it and I run it. This page says what it keeps, why, where, for how long, and how to have all of it deleted.

What the app backs up

From the store it's installed on, and only for that store:

• Products and their variants, prices, options and images.
• Inventory settings (tracking, cost, the locations a product is stocked at) and stock counts.
• Collections, with their conditions, their manual sort order and their images.
• Pages, blogs and blog posts.
• Navigation menus.
• Metafields on those items, and your metafield definitions.
• URL redirects, the files on your Files page, metaobject definitions and entries, and translations.
• Discounts, your store's policies, shipping profiles, and customer segments.
• Themes and their files.
• Once Shopify approves the app's access to customer data: customers (names, email addresses, phone numbers, addresses, tags, notes and marketing consent) and orders (their items, prices, discounts, taxes, addresses and notes).
• Once Shopify approves the same access: draft orders (their items, prices, discounts, shipping, notes, the email address, phone number and addresses on them, and their customer or company), gift cards (the last characters of the code, the value, balance and expiry date, the note, the buyer and recipient with any message to them, and each transaction), and store credit (each account's balance and transactions, and whose it is).
• B2B companies and their locations: names, notes, addresses with the names and phone numbers on them, tax settings and payment terms, and which customers are each company's contacts.

It also keeps a few facts about the store itself: its Shopify address and id, its time zone and currency, the store owner's email address, and which plan the store is on. When someone starts a restore, its receipt records the Shopify staff account id of the person who started it.

What it never touches

The app never reads blog comments or anyone's saved payment details. Gift cards and store credit are backed up and in your export but never restored, because they're money. A customer's marketing consent is backed up but never restored: only the customer can change it.

Your customers' data

Backups of customers, orders, draft orders, gift cards, store credit and companies are encrypted at rest with the rest of your backup, and they're used only to restore and export your store. When Shopify tells the app a customer asked to be erased, the app deletes from every backup it holds, the same day, that customer, the orders named in the request, and the customer's draft orders, store credit and the gift cards they bought or were sent. A B2B company that lists them as a contact stays backed up, but every version of it loses the names and phone numbers on its locations' addresses, and its restore receipts lose their field-by-field detail (the counts stay). When a customer asks for their data, the store owner can download what the app holds on them from the app, with the companies they're a contact of. A copy you've already sent to your own storage (below) is yours, and the app can't reach it to erase it.

Why it keeps it

Only to do what you installed it for: to back up your store, to restore items you choose, to export your store when you ask, to copy it to another store of yours or to storage of your own when you set that up, and to show you a summary of what was backed up. It's never used for anything else.

The store owner's email address is used only for notices about your backups: for example if backups stop because Shopify's access for the app lapsed, if your store outgrows its plan, or before anything is deleted.

Where it's kept, and how

On a server I rent from Contabo, in Germany (European Union). Your backups are encrypted at rest. The list of items the app shows you (each item's title and handle) is kept in its database.

The server's logs record your store's address, item ids and counts, never product titles, descriptions, prices or images. The app's own database is backed up nightly, encrypted before the copy is written, and those copies are kept for 14 days on the same server and on my own computer.

These public pages set no cookies and load nothing from other sites.

How long it's kept

While the app is installed, every plan keeps restore points for any day in the past year (365 days), and every change in the past 7 days, unless you choose a shorter history (90 or 30 days) in Settings. Nothing already kept is ever shortened without notice, and if the store stays installed without an active plan, nothing is deleted without notice first.

When it's deleted

When you uninstall the app, backups stop at once and everything the app holds for your store is deleted about 48 hours later, when Shopify tells the app to. If that notice never arrives, the app deletes it anyway after 7 days. Every copy, including the database copies above, is gone within 30 days of the uninstall. Before you leave, the app's Settings screen offers a download of everything, and the Export screen can download your store as it was on any day it still holds.

Who else sees it

No one I choose. I don't sell your data or share it. The only other companies involved are Shopify, where your store and your plan live, and Contabo, which rents me the server. If you set up a copy to storage of your own (an SFTP server, S3-compatible storage, Google Drive or Dropbox), the app sends your store's export there because you asked it to, and to nowhere else, with the sign-in details you gave it. Those details are encrypted at rest and deleted when you remove the destination or when your data is deleted, and the copies there are yours. The app's use of information received from Google follows the Google API Services User Data Policy, including the Limited Use requirements. If you copy to another store of yours, the other store reads this store's backup only with a one-time code made here. If I ever add another company that holds your data, it will be named here first.

Your requests

To get a copy of what the app holds for your store, use the Export screen or write to me. To have it deleted without uninstalling, write to me from the store owner's email address and I'll delete it and confirm when it's done.

If something goes wrong

If your store's data is ever exposed, I'll tell Shopify within 24 hours of finding out, and I'll tell you directly.

Contact

Zulqarnain Ahmad, an independent developer in Pakistan. Write to me at support@aislekit.app. I answer within one business day.