Privacy Policy

Revend ("we", "us") provides an abandoned-cart recovery service for Shopify merchants. We process data on behalf of merchants who install our Shopify app.

From the merchant's Shopify store, after installation:

• Store metadata: shop domain, store name, currency, timezone.
• Abandoned checkout data: cart line items, totals, abandoned-at timestamp.
• Customer contact data: email address and (where the customer consented at checkout) phone number, first name, last name.
• Order data: order ID, status, total, completion time.

We do not collect payment card numbers, CVVs, or full billing addresses.

• Send personalised recovery messages by email, and by SMS where the customer opted in to texts, on the merchant's behalf.
• Compute recovery analytics for the merchant dashboard.
• Improve message personalisation via aggregated, de-identified data.

We never sell personal data and never use it to market unrelated products to a merchant's customers.

Message copy is generated using Anthropic's Claude API. Cart and customer first-name data are sent to Anthropic strictly to generate the message. Anthropic does not train on this data. See Anthropic's privacy policy.

For shopper data (names, email addresses, phone numbers, cart contents) the merchant is the data controller and Revend is a processor acting on the merchant's documented instructions. The merchant decides that recovery messages are sent; we carry them out. A shopper exercising a right of access or erasure can contact either party, and where the request reaches us first we action it and notify the merchant.

For merchant account data (the store owner's own name, email, billing record and usage) Revend is the controller, because we decide what is collected in order to run the service and bill for it.

• Fly.io (hosting, primary region London)
• Neon (PostgreSQL database)
• Anthropic (AI message generation)
• Resend (email delivery, primary transport)
• Google (Gmail SMTP, fallback email transport)
• Brevo (SMS delivery, where the customer opted in to texts)
• Stripe (subscription billing)
• PayPal (subscription billing, where the merchant pays by PayPal)
• Shopify (billing and store data, for stores installed from the Shopify App Store)
• PostHog (product analytics)
• Sentry (error monitoring)

We retain abandoned-cart and customer contact data while the app is installed on the merchant's store. When the app is uninstalled, Shopify sends a shop/redact webhook 48 hours later and we delete all data for that store within 30 days of receiving it. Cancelling a paid plan without uninstalling does not start that clock, because the app is still installed and still working. Deletion can be requested at any time at RevendCartRecovery@gmail.com.

End customers of merchants have the right to access, correct, or delete their personal data. Requests should be sent to the merchant. Merchants can forward requests to RevendCartRecovery@gmail.com and we will respond within 30 days.

We honour the three mandatory Shopify GDPR webhooks: customers/data_request, customers/redact, and shop/redact. Customer data is purged within 30 days of a redact request; shop data is purged within 30 days of uninstall.

All traffic is TLS 1.2+. PII fields (email, phone) are encrypted at rest. Access tokens are stored encrypted. Internal access is logged.

Material changes will be announced via the merchant dashboard at least 14 days before they take effect.

RevendCartRecovery@gmail.com