Privacy policy

Last updated 7 October 2026.

Estre is a Shopify app. This policy explains what it reads from a store that installs it, what it keeps, and for how long.

What Estre reads

When a customer account or order is created, Shopify sends it to Estre. Estre reads the name, email address, billing and shipping countries and the shopper's network (IP) address to judge whether it looks like a bot or fraud, and reads Shopify's own fraud recommendation for orders. When a merchant runs a scan, Estre reads the names, email addresses and order counts of the store's newest 250 customer accounts.

What Estre keeps

Estre does not store names, email addresses, phone numbers, postal addresses or IP addresses. For each account or order it rates medium or high risk, it keeps the Shopify ID, the order number, the score, the reasons (for example "Uses a throwaway email service (mailinator.com)") and what it did. To spot several orders from one network, it keeps a one-way hash of the network address for one day. It also keeps daily counts of how many accounts and orders it checked, and the store's access token and settings.

How long

Flag records: 90 days. Network hashes: 1 day. When a store uninstalls Estre, its access token is deleted at once; Shopify then asks Estre to erase the rest of the store's data, and Estre does. Records about a single customer are erased when Shopify passes on that customer's erasure request.

Who it is shared with

No one. Estre does not sell or share data, and does not use it for advertising or to train AI models. It is processed on Cloudflare's servers, where the app runs.

What Estre changes in a store

Only when the merchant turns on protection: it adds tags to orders and accounts, adds its findings to an order's fraud analysis, and places fulfillment holds. It deletes customer accounts only when the merchant presses the delete button and confirms, and only accounts with no orders.

Contact

support@shaewoo.com