Arcanum Engine is a template-based automation app for Shopify merchants. We process store and customer-related data only to run automations the merchant explicitly installs (for example low-stock Slack alerts, VIP order routing, or abandoned checkout recovery).

Arcanum Hollow Labs acts as a service provider to the merchant. The merchant remains responsible for their storefront, customer relationships, and compliance with applicable privacy laws.

Shop identity: shop domain, timezone, and subscription plan tier.

Authorization: encrypted Shopify offline access tokens and session metadata required to call the Shopify Admin API on the merchant's behalf.

Automation configuration: template choices, thresholds, Slack channel labels, customer tags, and similar settings the merchant enters in the install wizard or edit screen.

Webhook payloads: Shopify event data needed to evaluate triggers (for example order totals, inventory quantities, checkout or fulfillment events, and customer identifiers when a template tags a customer). Abandoned checkout recovery stores checkout snapshots and scheduled alert times until the checkout completes, the merchant uninstalls, or an alert is sent after a configured idle period.

Operational logs: automation run status (success, skipped, failed), trigger topic, timestamps, and error messages.

Connector credentials: encrypted Resend API keys (email alerts), Slack incoming webhook URLs, Discord channel webhook URLs, Microsoft Teams incoming webhook URLs, and Klaviyo private API keys the merchant saves in Settings.

Billing: Shopify app subscription status via Shopify Billing API (no separate payment card storage in Arcanum Engine).

We use the data above solely to provide Arcanum Engine functionality: registering webhooks, evaluating automation rules, executing actions (such as Slack notifications or Shopify customer tags), displaying run history, and managing app billing.

We do not use merchant or customer data for advertising, resale, or unrelated analytics.

We process the minimum data required for each installed template. Merchants choose which automations to enable and configure thresholds and channels.

We do not require access to data beyond what each template needs to run. Merchants can disable automations or uninstall the app to stop processing.

Merchants install Arcanum Engine under the Shopify Partner Program terms and this data processing description.

We tell merchants what we process through this page, in-app Settings and documentation, and Shopify App Store listing materials.

Use of Arcanum Engine is limited to the automation purposes described here.

Arcanum Engine does not collect consent directly from a merchant's customers. Automations run on the merchant's Shopify store data according to the merchant's configuration.

Merchants are responsible for providing appropriate notices and obtaining any required consent from their customers under applicable law.

We do not sell, rent, or trade merchant or customer personal data. We do not share data with third parties except subprocessors listed below, solely to operate the service.

Templates apply merchant-defined rules (for example order total above a threshold) to trigger operational actions such as Slack alerts or customer tags. These are merchant operations workflows, not decisions with legal or similarly significant effects on consumers.

Arcanum Engine does not make credit, employment, housing, or comparable eligibility decisions about customers.

Shop credentials and connector secrets are retained while the app is installed on the merchant's store.

Automation run logs and webhook deduplication records are retained to provide run history and prevent duplicate processing. We apply reasonable retention limits and delete or anonymize shop data when the app is uninstalled, subject to short operational backup cycles.

Merchants may contact us to request export or deletion assistance as described below.

Data in transit is protected with TLS (HTTPS) between Shopify, our application, and integrated services such as Slack.

Sensitive values at rest (Shopify access tokens, Resend API keys, Slack webhook URLs, Discord webhook URLs, Microsoft Teams webhook URLs, and Klaviyo API keys) are encrypted using application-level encryption before storage in our database.

Access to production systems is limited to authorized Arcanum Hollow Labs personnel with a business need.

Shopify — commerce platform, webhooks, Admin API, and app billing.

Hosting and database providers — application hosting and PostgreSQL storage for shop configuration and run logs.

Resend (optional) — when the merchant connects email alerts, team alert emails are sent through the merchant's Resend account to configured recipient inboxes.

Slack (optional) — when the merchant connects a Slack incoming webhook, alert text is delivered to the merchant's chosen Slack workspace.

Discord (optional) — when the merchant connects a Discord channel webhook, alert text is delivered to the merchant's chosen Discord channel.

Microsoft Teams (optional) — when the merchant connects a Teams incoming webhook, alert text is delivered to the merchant's chosen Teams channel.

Klaviyo (optional) — when the merchant connects a Klaviyo private API key and enables Klaviyo events on a template, Arcanum Engine sends track events containing customer email and order/cart properties defined by that template.

When a merchant uninstalls Arcanum Engine, we receive Shopify's app/uninstalled webhook and remove shop credentials, connector configuration, and automation installs associated with that store.

Residual backups may persist for a limited period for disaster recovery, after which they are purged according to our retention practices.

Arcanum Hollow Labs

Privacy and data requests: privacy@arcanumhollow.com

For merchant support related to Arcanum Engine automations, use the contact options on arcanumhollow.com or your Arcanum engagement lead.