Request Deletion

Owners can request account deletion from Dashboard Settings. The API records a pending request scheduled 30 days later.

Check or Cancel

During the grace period, check the scheduled date or cancel the request. Cancellation is unavailable after processing begins.

Processing

A distributed-lock-protected daily job atomically claims due requests, reclaims abandoned work, stops linked Stripe billing, disables users, revokes plugin/OAuth/reset credentials, stops shipment polling, and anonymizes merchant, order, shipment, tracking-event, notification, branding, store, webhook, and audit data. Billing-support emails and case notes are scrubbed while pseudonymous operation and actor IDs are retained for integrity and financial reconciliation. Unique per-row tombstones preserve database constraints without retaining platform order or carrier tracking identifiers. Failed external billing calls leave the request retryable. For Shopify-connected accounts, deletion waits for verified app-uninstall evidence so platform-managed billing cannot continue after anonymization; backup expiry remains an operations lifecycle responsibility.

Temporary Platform Reconnect Safeguard

For Shopify and Wix, the raw shop or site identifier is removed during deletion. OrderTrackify retains only a keyed, non-reversible identity digest for up to 30 days, solely to reject delayed OAuth callbacks or automatic reprovisioning that could recreate the deleted account. Reinstall or reconnect is unavailable during this safety window. The daily deletion process clears expired digests, and a later legitimate connection also clears an expired digest under lock before proceeding.