OneKey Plans to Limit Customer Data Retention to 30 Days

OneKey plans to cap customer data retention at 30 days as it strengthens safeguards after recent data breaches and supply-chain attacks in the hardware wallet industry, founder Yishi said.

Yishi said OneKey removed customer names, email addresses and shipping addresses from historical order records and confirmed the deletion through Shopify’s API. He described the measures as preventive and said OneKey had not experienced a security incident related to the issues prompting the changes.

OneKey plans to handle returns, warranties and device verification without relying on long-term customer data storage. The planned limit does not cover records held by carriers such as FedEx and UPS, whose retention policies are outside OneKey’s control.

With a customer’s explicit consent, OneKey may separately keep a privacy-processed email address for product updates and security patch notices. The company’s longer-term goal is to move its online sales operation to its own infrastructure and reduce its reliance on third-party platforms such as Shopify.