SignupGuard guide

Getting started

1. Install SignupGuard from the Shopify App Store. It opens inside your Shopify admin; there's nothing to sign in to.
2. It starts in Monitor mode: it tags and lists suspicious accounts, and deletes nothing.
3. New accounts are checked as they sign up. Shopify usually tells the app within a minute.

How accounts are scored

Each new account gets a score from 0 to 100, based on its name and email address.

1. At 40 or more it's listed for review and tagged signupguard-review in Shopify.
2. At 70 or more it's treated as spam and tagged signupguard-spam.
3. Change both numbers in Settings › Sensitivity ("Review at score" and "Treat as spam at score").

A sudden burst of signups makes the app look more closely, but never gets anyone deleted on its own. Only what's in the account itself can.

For genuine accounts SignupGuard keeps only the customer ID and email domain, for 8 days, to spot bursts. No names or emails.

Reviewing accounts

Open Review queue. The tabs are Needs review, Deleting, Removed and Kept.

1. Select accounts and click "Keep (they're real)" to clear them. The tag is removed in Shopify.
2. Or click "Delete selected", then "Delete permanently" to confirm.
3. Anyone who has placed an order is never deleted. They go back to Needs review with the reason.

Shopify can't restore a deleted customer. See "The Removed list" below for how you can still reach them.

Auto-clean Pro plan

Auto-clean deletes high-confidence spam for you, with three safety limits.

1. Settings › Protection mode › choose Auto-clean › Save. Home shows "Auto-clean is on".
2. Spam waits 10 minutes on the Deleting tab first. Click "Keep (cancel delete)" to save anyone during that time.
3. Just before deleting, it checks with Shopify again and skips anyone with an order.
4. Set "Pause auto-clean after this many deletes in 24 hours" (100 to start; 10 to 5,000).

When it reaches that limit, auto-clean pauses itself and emails the store owner. Accounts still in their 10-minute wait go back to Needs review, and so does new spam, until you click "Resume auto-clean" on Home. Switching to Monitor stops pending deletes the same way. Raising the limit doesn't restart it by itself.

The Removed list

1. Open Review queue › Removed.
2. Click "Download the last 30 days" for a spreadsheet of each removed account: name, email, why it was flagged, and whether you or auto-clean deleted it.

After 30 days the name and email are erased. The counts on your dashboard stay right.

Cleaning up existing customers Pro plan

1. On Home, click "Scan existing customers".
2. It checks customers who have never ordered and lists suspicious ones in Needs review.
3. Review them like any other account. The scan itself never deletes or tags anyone.

Your own block and allow lists Pro plan

1. Settings › Email domains.
2. "Always block": one domain per line, e.g. junk-mail.example. Accounts from it are treated as spam.
3. "Never flag": domains you trust, e.g. your own company's. Accounts from them aren't flagged.

Klaviyo Plus plan

Removed spam accounts can be suppressed in Klaviyo too, so they stop costing you sends.

1. In Klaviyo, create a private API key with read access to Accounts and write access to Profiles and Subscriptions.
2. In SignupGuard: Settings › Klaviyo › paste it into "Klaviyo private API key" › Connect. The key is stored encrypted.
3. Tick "Suppress removed spam accounts in Klaviyo" › Save.

Uninstalling

1. Uninstall from Shopify admin › Settings › Apps. SignupGuard stops at once.
2. 48 hours later Shopify asks us to erase your store's data, and we do.
3. If you delete a customer in Shopify yourself, SignupGuard forgets what it stored about them.