ReturnFence Privacy Policy

Overview

ReturnFence is a Shopify app that helps merchants flag high-risk orders before fulfillment. This policy describes what data we collect, why we use it, and how merchants and customers can request access or deletion.

Data we collect

When a merchant installs ReturnFence, we process:

• Order data — order IDs, totals, line items, and tags needed to evaluate return-risk rules and update order tags for review.
• Customer data — customer IDs and order history used by rules (for example, prior return counts). We do not collect payment card numbers.
• Flagged-order records — which rules matched, review status (pending, approved, or held), and timestamps stored in our database for the merchant's review queue.
• Shop and app settings — shop domain, plan tier, alert email preferences, and OAuth session data required to operate the app.

How we use data

Data is used only to provide ReturnFence features: evaluating orders against merchant-configured rules, tagging matched orders for review, sending optional email alerts on paid plans, and syncing subscription status.ReturnFence does not automatically cancel orders or refunds — merchants decide whether to approve or hold flagged orders.

Retention

We retain shop and customer-linked data while the app is installed and as needed to operate the review queue. When a merchant uninstalls the app or Shopify sends a compliance deletion webhook, we delete associated data as described below.

Data access and deletion

ReturnFence implements Shopify's mandatory compliance webhooks:

• customers/data_request — exports stored flagged-order data linked to a customer when Shopify requests it.
• customers/redact — deletes flagged-order rows and other customer-linked records when Shopify requests customer data deletion.
• shop/redact — deletes all shop data (rules, flags, settings) after app uninstall or shop deletion.
• app/uninstalled — removes shop sessions and application data when the merchant uninstalls.

Subprocessors

We use the following service providers to host and operate ReturnFence:

• Shopify — app platform, Admin API, webhooks, and billing.
• Vercel — application hosting and delivery.
• Supabase — PostgreSQL database for app data.
• Resend — transactional email delivery for optional flag alerts on paid plans.

Contact

Questions about this policy or a data request: support@jesseg.io