RefundShift Early-Access Privacy Notice

Who controls your information

The controller is [Legal operator not configured], [Postal address not configured]. Questions and privacy requests can be sent to privacy@example.invalid.

What we collect

• Your work email address, which is required to join the list.
• Your Shopify store domain and monthly return-volume range, if you choose to provide them.
• Consent evidence such as the date, source page, notice version, confirmation status, and unsubscribe history.
• Limited technical information processed by Cloudflare and Turnstile to protect the form from abuse.

Why and on what legal basis

We use the information to manage RefundShift early access, beta invitations, and launch availability. The legal basis for these communications is your consent. Security and abuse-prevention processing is based on our legitimate interest in protecting the service.

Processors and international transfers

The site uses Cloudflare for hosting and form protection, Supabase for the private prospect database, and Resend for contact-list management and email delivery once a sending domain is verified. These providers may process information outside your country. Where required, transfers are covered by contractual safeguards such as the European Commission's Standard Contractual Clauses.

Retention

Requests awaiting email confirmation are scheduled for deletion after 30 days. Other prospect information is retained for no more than three years from collection or your last genuine interaction. An email open alone does not renew that period. After an opt-out, we retain only the minimum suppression information needed to respect it, normally for three years.

Your choices and rights

You may withdraw consent at any time through an unsubscribe link. You may also request access, correction, deletion, restriction, or portability by contacting privacy@example.invalid. EU residents may complain to their supervisory authority, including the CNIL. Canadian and applicable U.S. state privacy rights can be exercised through the same address.

Marketing safeguards

RefundShift does not sell the list, does not use it for unrelated partners, and keeps Resend open and click tracking disabled. Every marketing message identifies the sender and offers a simple unsubscribe mechanism.