Privacy Policy

Last updated: March 17, 2026

ReturnSense helps Shopify merchants analyze refund leakage using order, refund, product, variant, and workspace activity data from connected stores.

Information we process

• Shop information such as store domain, install status, and granted scopes.
• Order and refund records imported from Shopify, including order names, product titles, variant titles, SKUs, prices, quantities, refund amounts, and refund reason codes.
• Customer identifiers (Shopify customer IDs) included with imported orders when required for cohort and repeat-purchase analysis. ReturnSense does not import customer names, email addresses, or physical addresses from Shopify orders.
• Merchant and team details such as staff email addresses used for workspace access, monitoring recipients, and support correspondence.
• Billing and subscription status needed to manage paid plans.

How we use information

• To power refund analytics, monitoring, benchmarks, and drilldowns.
• To deliver weekly monitoring digests and operational alerts.
• To administer workspace access and multi-store plan limits.
• To support merchants, investigate issues, and maintain the app.

Legal basis for processing (GDPR)

ReturnSense processes data under the following legal bases as defined by the EU General Data Protection Regulation (GDPR):

• Contractual necessity — processing order, refund, and shop data is necessary to provide the analytics service you installed.
• Legitimate interest — aggregating anonymized benchmark statistics across opted-in stores to improve the quality of peer comparisons.
• Consent — where required, such as opting into cross-store benchmark data sharing.

Your rights under GDPR

If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you.
• Rectification — request correction of inaccurate data.
• Erasure — request deletion of your data (also available via Shopify's compliance webhooks).
• Restriction — request that we limit processing of your data.
• Portability — request your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interest.
• Complaint — you have the right to lodge a complaint with your local data protection supervisory authority.

To exercise any of these rights, contact us at support@returnsenseapp.com. We will respond within 30 days.

California Consumer Privacy Act (CCPA)

If you are a California resident, you have the right to know what personal information we collect, request its deletion, and opt out of any sale of personal information. ReturnSense does not sell personal information. To make a request, contact support@returnsenseapp.com.

Sharing

ReturnSense does not sell merchant or customer data. We use service providers such as hosting, database, and email delivery vendors only to operate the app. These sub-processors are bound by data processing agreements.

Cross-border data transfers

Your data may be stored and processed in the United States by our hosting and database providers. Where data is transferred outside the EEA, we rely on Standard Contractual Clauses or equivalent safeguards to ensure an adequate level of data protection.

Retention and deletion

Store data is retained while the app remains installed. Within 30 days of uninstallation, all shop and order data is deleted automatically via Shopify's compliance webhooks. Merchants may also request earlier deletion by contacting support.

ReturnSense responds to Shopify's mandatory compliance webhooks for customer data requests, customer redaction, and shop redaction, and removes or exports data as required.

Security

We use HTTPS for all data in transit, encrypted database connections (TLS/SSL), and restrict access to production systems. Access tokens are stored in an encrypted database and are never exposed to the client.

Contact