Skip to main content
POST
https://searchcompany-main.up.railway.app
/
api
/
shopify
/
webhooks
/
customers
/
redact
Customers Redact
curl --request POST \
  --url https://searchcompany-main.up.railway.app/api/shopify/webhooks/customers/redact \
  --header 'Content-Type: application/json' \
  --header 'X-Shopify-Hmac-Sha256: <x-shopify-hmac-sha256>' \
  --data '
{
  "shop_id": 123,
  "shop_domain": "<string>",
  "customer": {},
  "orders_to_redact": [
    {}
  ]
}
'

​
Customers Redact Webhook

Shopify sends this webhook when a store owner requests customer data deletion. This is a mandatory compliance webhook required for all public Shopify apps.

​
Headers

​
X-Shopify-Hmac-Sha256
string
required
HMAC signature for webhook verification

​
Request Body

​
shop_id
integer
required
The shop ID
​
shop_domain
string
required
The shop domain
​
customer
object
required
Customer information (id, email, phone)
​
orders_to_redact
array
Array of order IDs to redact

​
Response

Returns 200 OK with {"success": true} to acknowledge receipt.

​
Notes

  • This webhook is called by Shopify, not by your application
  • Must respond with 2xx status within 5 seconds
  • Must complete the redaction within 30 days
  • Since we don’t store customer data, we acknowledge but don’t need to delete anything