Effective date: 13 September 2026
Returova provides directional operational estimates based on Shopify data and merchant-supplied assumptions. It is not accounting, tax, or legal advice. Merchants remain responsible for validating financial assumptions and business decisions.
These terms form the data-processing agreement between the merchant as controller and Returova as processor where the GDPR, UK GDPR, or similar law applies. By installing or using the app, the merchant instructs Returova to perform the processing described below for the duration of the installation.
Processing is limited to reading and analysing order totals, line items and variants, refunds, structured return reasons, products, and inventory unit costs to provide return-rate comparisons, loss estimates, risk signals, exports initiated by the merchant, and prioritized actions. Data subjects are the merchant's customers and prospective customers represented in Shopify order records. Returova does not request direct identity or payment-credential fields.
Returova will process personal data only on the merchant's documented instructions, including these terms and actions taken in the app; ensure persons authorized to process data are bound by confidentiality; apply appropriate technical and organizational security measures; assist the merchant with verified data-subject requests, security obligations, impact assessments, and regulator consultations where reasonably required; notify the merchant without undue delay after becoming aware of a personal-data breach affecting the service; and make information reasonably necessary to demonstrate compliance available to the merchant.
The merchant generally authorizes Shopify, which hosts the embedded application and merchant data, and Cloudflare, which serves the limited public and privacy-webhook endpoints described in the Privacy Policy. Returova will not add a subprocessor that receives merchant order data without updating these terms or otherwise notifying merchants where required. International processing must use an applicable adequacy decision, approved standard contractual clauses, or another lawful safeguard.
Returova does not retain a separate copy of raw merchant order data. On removal, Shopify ends app access and handles app-owned Shopify data under its platform lifecycle. Because no external merchant dataset is retained, there is no external copy to return or erase. The merchant may request reasonable compliance information or an audit arrangement by emailing prabmurthy@gmail.com; safeguards may be applied to protect other merchants and platform security.
The merchant is responsible for lawful instructions, required customer notices, responding to data subjects as controller, and ensuring the app is suitable for its compliance obligations. Availability may be affected by Shopify or Cloudflare platform limits.
Contact prabmurthy@gmail.com for assistance or data-protection questions.