Privacy Policy

Return Audit · Last updated: September 2026

Return Audit ("the App") is operated by Oskar Sander. This policy explains what data the App reads, what it stores, and how that data is deleted. Use of the App is also covered by the Terms of Service.

Data the App Reads

The App has read-only access to your store. It cannot change your orders, your products or your theme. When you run a report, it reads:

• Orders from the last 60 days, which is as far back as Shopify lets the App see: order dates, whether each order shipped, refunded amounts, and the refunded items (product title, variant and quantity). It also counts how many orders were placed in the same period.
• Products: the IDs and titles of the products in those orders.
• Returns, only if you grant the optional returns permission: the reason a customer selected for a return and the note they wrote.

The App does not request customer names, email addresses, phone numbers, addresses or payment details. A return note is written by the customer, and the App passes it on as written.

How the Data Is Used

The data is used only to produce your report. The figures are calculated on our server. The refunded items, return reasons and notes are then sent to Anthropic's Claude API, which writes the report text. Order data is not kept after the report is produced.

What the App Stores

• Access credentials: the access token and refresh token Shopify issues for your store. They are kept in our database so the App can read your orders when you run a report.
• Report history: for each report, the date, the number of days covered, the number of refunded orders, the total refunded and the currency. It holds no product, order or customer details, and it is what the History page shows.
• Server logs: your store's domain and the time of each report, kept by our hosting provider to run the service.

Deletion

When you uninstall the App, your store's credentials and report history are deleted from our database automatically. You can also ask for deletion at any time by writing to returnaudit@gmail.com.

Third-Party Services

Return Audit uses the following third-party services:

• Anthropic Claude API: writes the report text. Data sent to Anthropic is governed by Anthropic's Privacy Policy.
• Railway: hosts the App server and its database. See Railway's Privacy Policy.

Shopify Privacy Webhooks

The App answers Shopify's mandatory privacy webhooks. It stores no customer data, so a customer data request or a customer erasure request has nothing to return or delete. A store's own data is deleted when the App is uninstalled, as described above.

Contact

If you have questions about this policy, contact us at returnaudit@gmail.com.