We retain only installation metadata, URLs, monitoring configuration, and evidence needed to provide the service. A shop can request deletion through Shopify privacy webhooks or support.