# Security

> How AndOr protects your store's data, what it never collects, and how deletion requests work.

Source: https://backtrackhq.com/docs/enterprise/security/

AndOr collects the minimum it needs to run, and protects what it keeps.
For the full details, read the [privacy policy](https://backtrackhq.com/privacy/).

## Encryption

- Data is encrypted in transit between Shopify, your storefront and the
  app.
- Data is encrypted at rest where we store it.

## Access

- Access to production systems is limited to authorized personnel.
- The access tokens that connect AndOr to your store are stored
  securely.

## Data we never collect

- Your customers' names, emails, phone numbers or addresses.
- Payment details. Billing is handled by Shopify.

Checkout rules check the cart and the buyer inside Shopify checkout,
and return only a result. That buyer data is not sent to AndOr.

## Data we keep, and why

- **Orders:** AndOr reads your store's orders. Shopify asks you to
  approve this when you install. AndOr uses it to bill you by your
  store's orders a month and to show Analytics.
- **Order count:** for other orders, only your store's count of orders
  that month, to bill you. The order id is kept for 7 days so no order
  is counted twice. No other order details are kept.
- **Order records:** identifiers, dates, money and quantities for orders
  with an AndOr offer or discount, to show your results. Kept for 90
  days, then deleted.
- **Storefront events:** anonymous views, clicks and adds, sent only
  after the shopper allows analytics.

See [Privacy and data](https://backtrackhq.com/docs/help/privacy-and-data/).

## Deletion and GDPR

- AndOr handles Shopify's mandatory privacy requests for customer data
  and store data.
- After you uninstall, Shopify asks AndOr to delete your store's data,
  and AndOr deletes it.
- You can ask for deletion at any time. See the
  [privacy policy](https://backtrackhq.com/privacy/#7-data-retention-and-deletion).