Check for, retrieve and delete a shopper's personal data in Yotpo, for data subject requests such as GDPR and CCPA.
Yotpo is all about providing consumers with a secure and trustworthy shopping experience, extending to reviewers and loyalty members who share content and personal details through Yotpo. To learn more about privacy, data processing and compliance at Yotpo, see the Privacy Guide.
Data Processing AgreementLearn more about our privacy compliance guidelines in our Data Processing Agreement.
Which endpoints to call
Use these endpoints to answer a data subject request: check whether Yotpo holds data about a shopper, get a copy of it, and delete or anonymize it. There are two sets, one per Yotpo product. A shopper can have data in both, so for a full request call both sets.
| Reviews and Visual UGC | Loyalty & Referrals | |
|---|---|---|
| Base URL | https://api.yotpo.com/privacy | https://loyalty.yotpo.com/api/v2/privacy |
| Authentication | Your store's access token in the X-Yotpo-Token header. See About authentication. | Your Loyalty GUID and API key in the x-guid and x-api-key headers. See Loyalty authentication. |
| Check for data (synchronous) | Data exists | Data exists (Loyalty) |
| Get a copy (asynchronous: emailed as a JSON file to your account's email address) | User data | User data (Loyalty) |
| Delete or anonymize (asynchronous, can't be undone) | GDPR Delete: one or more emails per request | Anonymize user (Loyalty): removes the shopper's email, name and phone number |
You can also delete a loyalty member's data from the Yotpo Loyalty admin. See Customer management actions.