Privacy Policy

This Privacy Policy explains how Forthroute handles information when a merchant installs the Shopify app or a customer uses the merchant's returns portal.

1. Information We Collect

We collect the information needed for the product or service you use.

• Merchant account, store, and business-contact information supplied through Shopify or directly to us.
• Shopify order, product, customer, fulfilment, refund, and return-workflow data needed to identify an order and process a return request.
• Return reasons, exchange selections, shipment and label details, tracking events, and communications submitted through the return workflow.
• Technical and usage data such as IP address, browser, device, requested pages, and cookie choices.

2. How We Use Information

We use this information to authenticate stores, operate return portals and return workflows, create requested labels, pass merchant-approved actions to Shopify, provide support, prevent misuse, and maintain and improve the service.

3. When We Share Information

We share data with Shopify, EasyPost and the selected carrier when a label is requested, service providers needed to host and secure the app, and when disclosure is required by law. We do not sell personal information.

4. Aggregated and De-identified Data

We may combine operational data across stores into aggregated, de-identified statistics for benchmarking, service improvement, research, reports, and documentation. Published statistics do not identify an individual store, product, customer, or order, and development and test stores are excluded before aggregation. Customer personal information is not used in published statistics.

5. Data Retention

We retain information for as long as needed to provide the requested service and meet security, fraud-prevention, accounting, dispute, and legal obligations. When information is no longer required, we delete or de-identify it.

6. Security

We use administrative, technical, and organisational safeguards designed to protect information. No internet transmission or storage method is completely secure, so absolute security cannot be guaranteed.

7. Your Rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or export personal data, or to object to certain processing. We may need to verify your identity before acting.

8. Contact

Questions, privacy requests, or deletion requests can be sent to returns@forthroute.io.

9. Changes to This Policy

If we change how we use store data, we will update the date at the top of this page before the change applies.