Privacy & Data Handling
This page describes how the app itself collects, uses, and retains data. It documents the app’s technical behavior — it is not a substitute for IFG eCommerce’s company-wide privacy policy, and it is not legal advice.
What is collected
When a customer submits a return through the storefront form: name, surname, shipping address, email, order number, and optionally phone number and notes. The app also reads order data from Shopify (order number, email, order date, fulfillment status) to verify the request is genuine.
Merchants additionally provide their own company legal details and return address during onboarding, used to generate compliant withdrawal notices and receipts.
Merchants who send a suggestion from the “Suggest an improvement” form on the app’s Support page provide the text they write, their store’s .myshopify.com domain and, only if they enter it, an email address to receive a reply. The email field is optional.
Why it’s collected
- To verify a return request corresponds to a real order (fraud prevention).
- To process the return/refund and generate confirmation emails and PDF receipts.
- To meet EU consumer-rights obligations (Directive 2011/83/EU and its 2023/2673 amendment), which require identifying the customer and the contract.
Welcome email to the store owner
After a new install of the app we send one single welcome email to the account email of the store owner. We read that address, and the owner’s name, from the Shopify Admin API at install, with no additional scope; we do not use the store’s public contact email. The email is sent by Francesco Guiducci (IFG eCommerce), thanks you for installing, introduces him as the freelance developer of the app and invites you to reply with any question about it. It is a service and relationship message, not a newsletter and not a promotion, and nothing else is sent afterwards. It is delivered through Resend (United States, Standard Contractual Clauses). Legal basis: performance of the contract for the use of the app (Art. 6(1)(b) GDPR) and, for the introduction, legitimate interest (Art. 6(1)(f) GDPR). You can object at any time by replying to the email, using the unsubscribe link in it, or writing to info@ifgecommerce.com. The owner’s name and email are read from Shopify at send time and are not stored in our welcome record. After uninstall and the erasure request (shop/redact) we keep only a minimal suppression record: the shop’s .myshopify.com domain, the sending status with dates and, for anyone who unsubscribed, the date of the objection and a keyed cryptographic fingerprint (HMAC-SHA256) of the email address. The fingerprint is pseudonymised data, not anonymous, and does not contain the address in clear. It is used only to avoid sending the welcome email again and to honour the objection (Art. 21 GDPR). This data is deleted after 24 months. The email and content already handed to the sending provider (Resend) remain in its logs under its own retention.
Suggestions from the Support page
When you send a suggestion from the Support page, the text and your store’s .myshopify.com domain reach our support address by email through Resend (United States, Standard Contractual Clauses). We use them to assess and improve the app, based on our legitimate interest (Art. 6(1)(f) GDPR). If you enter an email address, we use it only to reply to you, based on your request (Art. 6(1)(b) GDPR): we don’t store it in the app’s database, don’t use it for any other communication and don’t share it with anyone else. The message stays in the support mailbox for as long as needed to handle your request, and in Resend’s logs under its own retention. You can ask for it to be deleted at any time by writing to info@ifgecommerce.com.
Who it’s shared with
- Shopify — to verify orders and, on eligible plans, to issue refunds directly (Shopify Admin API).
- Email delivery (Nodemailer / Resend) — to send the customer’s confirmation, receipt, and status-update emails, and the one-time welcome email to the store owner. It also delivers to us the suggestions sent from the Support page, with the optional email if one is entered.
- AI providers (Anthropic – Claude; alternatively Google – Gemini) — power the in-app Support chat used by merchants to ask questions about the app. They process the merchant’s support question text (not customer order data) to generate replies. This may involve processing outside the EU (United States) under appropriate contractual safeguards (Standard Contractual Clauses).
Data is not sold or used for advertising. The welcome email described above is a service message, not marketing.
Retention
If a merchant uninstalls the app, or requests erasure, customer personal data (name, email, phone, notes) is anonymized. Order-level accounting fields (order number, resolution, amounts) are kept, anonymized, since retaining them is a standard fiscal accounting requirement (up to 10 years) — the anonymized records can no longer be linked back to an individual.
Welcome email suppression record (shop domain, sending status with dates and, for anyone who unsubscribed, the date of the objection and a pseudonymised HMAC-SHA256 fingerprint of the address): deleted after 24 months, as described above.
Suggestions sent from the Support page (text, store domain and, if entered, the email for the reply): kept in the support mailbox for as long as needed to handle the request, and in Resend’s logs under its own retention; never stored in the app’s database.
Security
- Shopify access uses expiring offline access tokens, refreshed automatically — no long-lived credentials.
- The database (Firestore) is only reachable through the app’s own backend service identity; there is no public read/write access.
Questions or requests
To exercise a data access or erasure request, contact the merchant whose store you placed the order with, or write to info@ifgecommerce.com.