Back to home

ReturnBoost Privacy Policy

Last updated: October 15, 2026

1. Who We Are

ReturnBoost ("we", "us", or "our") is a Shopify application engineered to automate return and exchange workflows, reduce reverse shipping costs, and safeguard merchant revenue. Contact us anytime at: support@getsearivo.com.

2. Customer & Merchant Data We Process

To deliver self-service buyer returns and automated merchant retention, ReturnBoost processes the following minimal necessary data points:

  • Store Information: Shopify shop domain, app installation status, encrypted API access tokens, and merchant return preferences (such as return window days, discount rates, and warehouse address).
  • Order Verification Data (Protected Customer Data): Order name/number, buyer email address, order creation timestamp, line-item titles, quantities, variant details, product image URLs, and payment totals.
  • Return Request Details: Selected return items, customer-selected return reasons, optional customer notes, issue resolution method (Keep-Item partial refund, Store Credit voucher, or mail-in return), and customer-provided courier tracking numbers.

What We Never Collect or Store

  • We never collect or store credit card numbers, CVVs, bank account credentials, or raw payment details (all transactions are securely executed by native Shopify Payments).
  • We never sell customer or merchant data to third parties or advertising brokers.
  • We never use merchant customer data for cross-store profiling or targeted advertising.

3. Lawful Basis & Usage Purposes

All processed data is utilized strictly to provide agreed app functionality on merchant instructions:

  1. Authenticating buyers accessing the self-service Return Portal using their order number and email address;
  2. Generating automated Keep-the-Item partial refunds via official Shopify Refund APIs;
  3. Issuing store credit discount codes via official Shopify Discount APIs;
  4. Displaying real-time return analytics and return request lifecycles to authenticated merchants.

4. Retention & Automatic Deletion Schedule

  • Return Requests & Logs: Kept for 60 days following resolution to facilitate accounting reconciliations, after which they are permanently deleted or anonymized.
  • Shop Deletion (shop/redact): When a merchant uninstalls ReturnBoost, Shopify notifies us via webhook. Within 48 hours of confirmation, all associated store configurations, tokens, and records are permanently removed from our active database.
  • Customer Redaction (customers/redact): Upon receiving a valid redaction request from Shopify, all matching customer records and associated return requests are purged within 30 days.
  • Customer Data Requests (customers/data_request): Upon receipt, we compile and deliver an encrypted data export of any recorded return requests for that customer to the merchant.

5. Security & Technical Safeguards

  • All network traffic is encrypted in transit using industry-standard TLS 1.3 / HTTPS.
  • Store API credentials and sensitive tokens are encrypted at rest using AES-256-GCM with isolated server-managed keys.
  • Merchant administration routes require valid Shopify App Bridge Session Tokens (JWT) verified against official Shopify public keys.

6. Contact & Data Protection Officer

For any inquiries, data deletion requests, or security disclosures, please contact our support team at: