Privacy Policy for Jojocode Return Management

1. Information the App Collects

When you install the App, we are automatically able to access certain types of information from your Shopify account. We collect the following information directly from the Shopify API to provide the core functionality of the App:

• Order Information: Order numbers, line items, and fulfillment status to process and validate return requests.
• Customer Information: Customer email addresses, which are used to verify return requests, send return status updates, and provide shipping labels.
• Return Data: Return reasons, customer notes, requested refund amounts, and generated return labels (carrier details and tracking codes).

We do not collect, store, or process any raw payment details (such as credit card numbers). All payment processing is handled independently by Shopify.

2. How Do We Use Your Personal Information?

We use the personal information we collect from you and your customers to provide the core services of the App, which includes:

• Providing a portal for customers to submit return requests.
• Allowing merchants to review, approve, or reject return requests from their dashboard.
• Generating return shipping codes/PDFs and assigning them to specific returns.
• Sending automated email notifications to customers regarding their return status.
• Syncing return decisions back to the Shopify Admin.

3. Sharing Your Personal Information

We share personal information to provide the App’s functionality:

• Shopify: We share return and order updates back to your Shopify store via the Shopify API.
• Service Providers: We may use third-party platforms (such as database hosting or email delivery services) to run the App. These providers process data on our behalf and are bound by confidentiality agreements.
• Integrations: If you choose to enable the Klaviyo integration within the App, customer email data may be passed to your Klaviyo account for marketing or transactional email purposes.

Finally, we may also share Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.

4. Data Retention and Deletion (GDPR / CCPA)

We act as a Data Processor for the data collected through the App, and the merchant acts as the Data Controller.

• Customer Data Redaction: If a merchant or Shopify requests that a customer's data be deleted (via the customers/redact webhook), we will automatically anonymize that customer's email address and personal details in our database within 30 days.
• Shop Redact: If you uninstall the App, Shopify will send us a shop/redact request after 48 hours. Upon receiving this, we will permanently delete all records, return logs, settings, and personal data associated with your store from our systems.
• Customer Data Request: We support Shopify's Data Request webhooks and will provide the requested customer timeline/history when initiated by the merchant or Shopify.

5. Security

We take reasonable precautions and follow industry best practices to make sure the data collected by the App is not inappropriately lost, misused, accessed, disclosed, altered, or destroyed. The App uses secure Database providers and communicates exclusively over encrypted HTTPS connections.

6. Changes

We may update this privacy policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal, or regulatory reasons.

7. Contact Us

For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e-mail at hello@jojocode.dev.