Last updated: 2026-10-05What Yikes storesYour store and settings. Your myshopify.com address, store name, time zone, and the rules and wording you choose in the app.An activity log. For each cancel, cancel request, or size or color change a customer makes or tries to make: the order’s id and name, the customer’s Shopify id (a number, used for the per-customer monthly limit), what happened, the reason they picked or the item they changed, any price difference, and when.A notification address. Only if you type one in Settings; otherwise Yikes emails go to your store’s own email address, read from Shopify when they are sent.What Yikes reads but never storesTo decide what a customer can do with an order, Yikes reads it from Shopify at that moment: its status, payment status, items, the other sizes and colors of those items and their prices, product tags and collections, and the id of the customer it belongs to, so a customer can only ever act on their own orders. Yikes never stores a customer’s name, email, phone number or address, and no payment details.How it is usedTo show customers Cancel order and Change size or color when your rules allow it, to cancel or edit the order through Shopify when they confirm (or send you the request to approve), to email you about it, and to trigger Shopify Flow if you use it. Nothing is sold or shared for advertising, and Yikes makes no decisions about customers beyond applying the rules you set.Who is responsible for the dataYou decide why your customers’ data is used in Yikes, through the rules you set. 8th Origin LLC processes it on your behalf, only to run Yikes, under this policy and the terms of service you accept when you install the app.Service providers and where data is processed8th Origin LLC operates Yikes. Netlify hosts the app, Neon stores its database, and Resend delivers the emails sent to you. They may process this data outside your country, including in the United States. Shopify supplies store and order data and carries out every cancellation, edit and refund. Data travels encrypted between Shopify, Yikes and these providers, and the database is encrypted at rest.Retention and deletionActivity log entries are deleted 12 months after they are written.Records of Shopify’s webhook deliveries are deleted after 30 days.When you uninstall Yikes, every row for your store is deleted at once.Shopify’s customer redaction requests delete that customer’s entries from the activity log.ContactQuestions about how Yikes handles data: danny@8thorigin.com.