Privacy Policy

Last updated: March 29, 2026

Refund Notifier ("we", "our", "the app") is a Shopify application operated by Impress ("the company"). This policy describes what data we access, how we use it, and how we protect it.

What data we access

When you install Refund Notifier, we request read-only access to your Shopify store via the following API scopes:

• read_orders — to retrieve order and refund details when a refund is issued
• read_customers — to retrieve the customer's email address and language preference

We do not request write access to any Shopify data.

How we use customer data

When you issue a refund, we retrieve the customer's email address, first name, and language preference from Shopify solely to send a refund notification email. This data is used in real time and is not stored in our database.

Customer email addresses are transmitted to Amazon Web Services Simple Email Service (AWS SES) for email delivery. AWS processes this data in accordance with the AWS Privacy Policy.

What we store

We store the following data in our database:

• Merchant account information — your Shopify domain, store name, contact email, and branding settings (accent color, logo). This is required to operate the app and customize notification emails.
• Notification activity log — a metadata record for each refund notification, including the order number, refund amount, currency, delivery status, and timestamp. These records do not contain customer email addresses, names, or any other personal information.
• Logo images — if you upload a custom logo, it is stored on Amazon S3. No customer data is stored on S3.

Third-party services

We use the following third-party services:

• Amazon Web Services (SES) — email delivery. Customer email addresses and email content are transmitted to AWS for sending.
• Amazon Web Services (S3) — file storage for merchant-uploaded logo images only.
• Crisp — live chat support within the Shopify admin. Crisp may set its own cookies. See the Crisp Privacy Policy.
• Shopify — we access your store data through the Shopify API under the scopes listed above.

We do not sell, rent, or share customer data with any other third parties.

Cookies

The app uses a session cookie for merchant authentication within the Shopify admin. We do not use analytics cookies or tracking pixels on this website. The Crisp chat widget, loaded within the Shopify admin, may set its own cookies for chat functionality.

Data retention

Notification activity records are automatically deleted after 90 days. When you uninstall the app, all associated data — including your account information, notification history, and uploaded logos — is permanently deleted within 48 hours.

Data protection

All data is encrypted in transit over HTTPS and encrypted at rest by our hosting provider. We use read-only API scopes, minimizing our access to your Shopify data. Customer personal information (email, name) is processed in memory and never written to our database.

Data processing location

Our application and database are hosted in the United States. Email delivery is processed through AWS SES in the US. If you are located in the European Economic Area or United Kingdom, your data is transferred to and processed in the United States.

Sub-processors

We use the following sub-processors to provide the app's services:

• Amazon Web Services (SES) — email delivery (US)
• Amazon Web Services (S3) — logo image storage (US)
• Crisp — in-app live chat support (EU)

GDPR and privacy requests

We respond to mandatory Shopify compliance webhooks for customer data requests, customer data erasure, and shop data erasure. When a customer or merchant submits a data request through Shopify, we process it within 30 days as required.

Your rights

Depending on your jurisdiction, you may have the right to access, correct, delete, or port your personal data. You can:

• Uninstall the app at any time from your Shopify admin, which permanently deletes all data we hold about your store.
• Request a copy of your data by contacting us at the address below.
• Request deletion of your data via Shopify's built-in privacy request tools or by contacting us directly.

Contact

For privacy-related questions, contact us at support@refund-notifier.com.