Privacy Policy

RevenueShield ("we," "us") provides revenue recovery software for Shopify merchants. This policy explains what we collect, why, and how we handle it.

Information we collect

Account data: your name, email, and organization details you provide at signup. Store data: when you connect a Shopify store or upload order documents, we process order, refund, fulfillment, dispute, and related customer information (names, emails, addresses) strictly to provide the service — detecting revenue leaks and building dispute evidence. Billing data: payments are processed by Stripe; we never store card numbers. Usage data: standard logs needed to operate and secure the service.

How we use it

To operate RevenueShield: importing and analyzing store data, generating evidence packages, calculating risk scores, and sending service notifications. AI features process your case data through our model providers solely to generate your outputs; it is not used to train their models. We also maintain anonymized, aggregated dispute statistics (never customer names, emails, order numbers, or store identities) to improve recommendations across the platform.

Sharing

We do not sell personal information. We share data only with service providers needed to run RevenueShield (hosting, database, payment processing, AI processing), each bound by their own confidentiality obligations, or when required by law.

Shopify data & compliance

Store access tokens are encrypted at rest. We request read-only Shopify scopes. We honor Shopify's mandatory privacy webhooks: customer data requests, customer data erasure, and shop data erasure are processed within 30 days. Disconnecting your store revokes our access and deletes the stored token.

Retention & deletion

We keep your data while your account is active. You may request export or deletion of your organization's data at any time by contacting us; we complete deletion requests within 30 days, except records we must keep for legal or billing purposes.

Security

Data is encrypted in transit (TLS) and at rest, access is restricted per organization with row-level security, and credentials are never exposed to the browser.

Contact

Privacy questions or requests: support@revenueshield.app