Privacy Policy

Privacy Policy

Last updated: August 2026

This Privacy Policy explains how Shopigent Returns ("we", "our") collects, uses, and protects information when you use our Shopify app and services. By installing or using Shopigent Returns, you agree to the practices described here.

1. Information We Collect

Store data (via Shopify API)

  • Order information required to process returns (orders, line items, fulfillments)
  • Customer information relevant to a return (name, email, shipping address)
  • Product and inventory data for restocking
  • Refund and transaction records

Usage data

  • Returns created through the customer portal
  • Policy configurations
  • AI decision logs and audit trails
  • Analytics (return rates, resolution metrics)

Technical data

  • IP addresses for fraud detection
  • Basic request logs for security and debugging

2. How We Use Information

We use the information we collect to:

  • Process, approve, and refund customer returns
  • Generate return labels via your chosen provider
  • Detect and prevent fraud
  • Provide analytics and improve our service
  • Communicate about return status (email notifications)
  • Maintain security and troubleshoot issues

We do not sell your data. We do not use your data to train third-party models. AI decisions are made on your store's data to operate the service you requested.

3. Data Storage & Security

  • Data is stored in a Postgres database hosted by Railway (EU West region)
  • Access requires authenticated API keys — the MCP server is protected with key-based authentication
  • Shopify access uses your store's offline access token, used only for the app's core functions
  • All traffic is served over HTTPS
  • We apply industry-standard practices for access control and secrets management

4. Data Sharing

We share data only where required to deliver the service:

  • Label providers (SendCloud, Shippo, EasyPost) — only when you enable label generation, and only the data needed to create a shipment
  • Railway — as our hosting provider, they store data on our behalf under their standard terms
  • Shopify — refunds and order updates are written back through the Shopify Admin API you authorized

We never share your data with advertisers or unrelated third parties.

5. Data Retention

We retain return records and decision logs for as long as needed to operate the service and comply with legal obligations. If you uninstall the app, your data is deleted from our systems within 30 days, except where we are required to keep it by law.

6. Your Rights

Depending on your jurisdiction (including GDPR in the EU/EEA), you may have the right to:

  • Access the personal data we hold about you
  • Request correction or deletion
  • Object to or restrict processing
  • Data portability
  • Withdraw consent at any time

To exercise any of these rights, contact us at shopigent@greeknous.com. We respond to all verified requests within 30 days.

7. Cookies & Tracking

The docs site and app do not use advertising cookies or cross-site tracking. We may use basic server logs for security and performance monitoring only.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be noted on this page with an updated revision date. Continued use of the service after changes constitutes acceptance of the updated policy.

9. Contact

Questions about this policy? Contact us:

Email: shopigent@greeknous.com

This policy applies to the Shopigent Returns app, its documentation site, and the customer return portal.