1. Introduction
ReturnFlow ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our return management platform and services.
2. Information We Collect
2.1 Information You Provide
- Account information (name, email, company details)
- Shopify store connection data
- Customer return requests and communications
- Payment and billing information
- Support communications
2.2 Information We Collect Automatically
- Usage data and analytics
- Device and browser information
- IP addresses and location data
- Cookies and similar tracking technologies
2.3 Information from Third Parties
- Shopify store data (orders, products, customers)
- Shipping provider information
- Payment processor data
3. How We Use Your Information
- Provide and maintain our return management services
- Process return requests and facilitate refunds
- Detect and prevent fraudulent return attempts
- Generate analytics and insights for your business
- Communicate with you about your account and services
- Improve our platform and develop new features
- Comply with legal obligations and enforce our terms
4. Information Sharing and Disclosure
We do not sell, trade, or rent your personal information. We may share information in the following circumstances:
4.1 Service Providers
We share data with trusted third-party service providers who assist in operating our platform, including:
- Cloud hosting and infrastructure providers
- Payment processors
- Email and communication services
- Analytics and monitoring tools
4.2 Legal Requirements
We may disclose information when required by law, court order, or to protect our rights and safety.
4.3 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity.
5. Data Security
We implement industry-standard security measures to protect your information:
- Encryption of data in transit and at rest
- Access controls and authentication requirements
- Secure development practices
- Regular security monitoring and updates
- Incident response and breach notification procedures
- Regular backups and data protection measures
6. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to enhance your experience and collect usage data:
6.1 Types of Cookies
- Essential Cookies: Required for basic platform functionality
- Analytics Cookies: Help us understand how you use our platform
- Preference Cookies: Remember your settings and preferences
- Marketing Cookies: Used for targeted advertising (with your consent)
6.2 Cookie Management
You can manage cookie preferences through your browser settings or our cookie consent banner. Disabling certain cookies may limit platform functionality.
7. Data Retention
We retain your information based on business needs and legal requirements:
- Account Data: Retained while your account is active, plus 30 days after deactivation
- Return Data: Retained for 7 years for fraud prevention and tax compliance
- Financial Records: Retained for 7 years as required by law
- Support Communications: Retained for 3 years for quality assurance
- Analytics Data: Anonymized and retained for 2 years for business insights
You may request deletion of your data, subject to legal and contractual requirements. We will securely dispose of data when retention periods expire.
8. Your Rights and Choices
We respect your privacy rights. Depending on your location, you may have the following rights under GDPR, CCPA, and other applicable privacy laws:
- Right to Access: Request a copy of the personal information we hold about you
- Right to Rectification: Correct inaccurate or incomplete personal data
- Right to Erasure: Request deletion of your information (subject to legal limitations)
- Right to Data Portability: Receive your data in a machine-readable format
- Right to Restrict Processing: Limit how we use your information
- Right to Object: Object to certain processing activities, including direct marketing
- Right to Withdraw Consent: Withdraw consent for processing based on consent
- Right to Non-Discrimination: Not be discriminated against for exercising your privacy rights
How to Exercise Your Rights:
Email us at sean@tryreturnflow.com with your request. We will respond within 30 days (or as required by applicable law). You may need to verify your identity before we can process your request.
9. International Data Transfers
Your information may be processed in countries other than your own. We ensure appropriate safeguards are in place for international transfers, including standard contractual clauses and adequacy decisions.
10. Children's Privacy
Our services are not intended for children under 13. We do not knowingly collect personal information from children under 13. If we become aware of such collection, we will delete the information promptly.
11. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of material changes via email or through our platform. Your continued use of our services after changes constitutes acceptance of the updated policy.
12. Contact Us
If you have questions about this Privacy Policy or our data practices, contact us:
Email: sean@tryreturnflow.com
Address: ReturnFlow
9450 SW Gemini Dr PMB 864241
Beaverton, Oregon 97008-7105 US