"We retain Personal Data for as long as we have an ongoing business need to do so (e.g., to provide the Shopify services to you and our Merchants, to comply with applicable legal, tax, or accounting requirements, for security and fraud detection or prevention, or in connection with backup or disaster recovery processes), unless a different retention period is permitted or required by applicable law."
Shopify provides no specific deletion timelines and retains data as long as they claim an 'ongoing business need,' which includes broad justifications like security, fraud prevention, and disaster recovery.