Legal
Data Retention Policy
Last updated 11 June 2026
Bonsai WMS keeps operational history while a warehouse is active, redacts customer data when required, and removes closed-account data on a defined schedule.
Active merchant account data
For the life of the account
Organisation records, users, warehouses, products, locations, inventory, purchase orders, orders, shipments and audit-style operational history are retained while the account is active so the warehouse has a usable history.
Closed merchant accounts
Deleted or anonymised within 90 days of closure
During the early MVP this is handled as an operational process after cancellation or written request. We provide export support on request before deletion.
Shopify customer redaction
Processed when Shopify sends the privacy webhook
For customers/redact, Bonsai redacts customer personal data from named orders while preserving anonymous operational records such as items, quantities and movements.
Shopify shop redaction
Processed when Shopify sends shop/redact
The marketplace connection and associated marketplace data for the shop are deleted when Shopify sends the compliance webhook.
Marketplace event queue
Up to 7 days
The marketplace JetStream queue uses a seven-day maximum age for marketplace events.
Core WMS events
Operational queue retention
Core WMS events are held in NATS JetStream for downstream processing and are not treated as the long-term system of record.
Application logs and error reports
Normally up to 90 days
Logs and Sentry-style diagnostics are kept for reliability, security and debugging. We avoid including full order payloads where practical.
Contact enquiries
As long as needed for the conversation, then periodically cleaned
Messages sent through the website or email are kept for support and sales follow-up.
Billing records
As required for accounting and tax
Stripe and Bonsai billing records may be retained longer where needed for legal, tax or dispute reasons.
Backups
Until managed backup expiry
Residual copies may remain in encrypted provider backups after deletion from live systems, then expire on the provider's rolling backup schedule.
Current implementation note
Shopify customer and shop redaction are implemented in the Bonsai marketplace service. Full closed-account deletion is currently an operational support process for early customers; automated deletion and retention jobs are planned as the product scales.