App Privacy Policy
Privacy Policy
Last updated: May 6, 2025
1. Introduction
reverseBits (“we”, “our”, “us”) operates the Retainly Shopify app (“App”), available at synchook.getretainly.com. This Privacy Policy explains what data we collect, how we use it, and your rights.
By installing or using the App, you agree to this policy.
2. Data We Collect
From Shopify Merchants (Store Owners)
Shop domain — to identify your store and authenticate API requests
Order data — order IDs and payment status (via orders/paid webhook) to schedule and execute fulfillments
Fulfillment data — fulfillment order IDs and statuses via Shopify Admin API
App settings — fulfillment preferences stored as Shopify metafields on your shop
From Your Customers
We access customer and order data only as necessary to fulfill orders on your behalf. Specifically:
Customer notification preference (used when fulfilling orders)
We do not collect, store, or sell your customers’ personal information.
3. How We Use Data
Data Purpose
Shop domain Authenticate Shopify API calls, identify your store
Order IDs Schedule delayed fulfillments, trigger fulfillment via Shopify API
Fulfillment order data Execute order fulfillments on Shopify
App settings (metafields) Apply your configured fulfillment delay and enabled/disabled preference
We do not use your data for advertising, profiling, or any purpose beyond operating the App.
4. Data Storage
We store the following in our database:
Shop domain and order ID — temporarily, to schedule pending fulfillments
Records are marked as fulfilled upon successful processing and retained for operational logging
All data is stored on secured infrastructure. We do not store payment information, customer PII, or Shopify access tokens beyond active session use.
5. Data Sharing
We do not sell, rent, or share your data with third parties except:
Shopify — as required to operate the App via Shopify’s APIs
Infrastructure providers — hosting and database providers under strict data processing agreements
Legal obligations — if required by law
6. Data Retention
Pending fulfillment records are retained until processed
Upon app uninstall, we delete all data associated with your shop within 30 days
7. Your Rights
As a merchant, you may:
Request a copy of data we hold about your store
Request deletion of your store’s data at any time by emailing us
Uninstall the App at any time — this stops all data processing
Contact us at admin@reversebits.tech for any data requests.
8. Security
We implement industry-standard security practices including:
HTTPS for all data transmission
Secret-based authentication for internal API endpoints
Access controls on database and infrastructure
9. GDPR & Privacy Compliance
If you operate in the EU or handle EU customer data, you (the merchant) are the data controller. reverseBits acts as a data processor on your behalf, limited to operating fulfillment features you explicitly enable.
10. Children’s Privacy
The App is not directed at individuals under 18. We do not knowingly collect data from minors.
11. Changes to This Policy
We may update this policy. We will notify you via the Shopify Partner Dashboard or email. Continued use after changes constitutes acceptance.
12. Contact
reverseBits
Email: admin@reversebits.tech
App: Retainly (synchook.getretainly.com)
