Privacy Policy

Advera ReturnsLast updated: 19 July 2026This Privacy Policy explains how Advera LLC FZ ("Advera", "we", "us", or "our") collects, uses, stores, and protects personal data when using the Advera Returns Shopify app.This policy applies to:🏪 Merchants who install and use the App
👤 End-customers who submit cancellation or return requests through a merchant's return portalContact
📧 support@easyreturns.dk1. Data Controller & Processor
Merchant DataFor merchant account information (such as shop settings, billing, and account details), Advera LLC FZ acts as the Data Controller.End-customer DataFor customer information submitted through a merchant's return portal, the Merchant is the Data Controller, while Advera acts as the Data Processor, processing data solely on the Merchant's documented instructions.2. Personal Data We Process
Merchant InformationWhen a merchant installs or uses the App, we may process:Shop domain
Shopify Shop ID
Shopify OAuth access token (encrypted)
Admin user ID
Admin email address
Billing plan and subscription status
Trial information
Usage statistics
Branding and return policy settings configured by the merchant
End-customer InformationWhen customers submit a cancellation or return request, we may process:Order number
Email address (used for order verification)
Return or cancellation reason (optional)
Selected products and quantities
Status of the return or cancellation request
Technical InformationTo keep the service secure and reliable, we automatically collect:IP address
Browser and device information (User-Agent)
Request timestamps
Error logs
Security and rate-limiting logsWe never process or store payment card information.
All subscription payments are handled directly by Shopify.3. Why We Process Your Data
Purpose Legal Basis (GDPR)
Provide the App to merchants Contract (Art. 6(1)(b))
Process customer return requests Merchant instructions / Processor obligations (Art. 28)
Security, abuse prevention and fraud detection Legitimate Interest (Art. 6(1)(f))
Billing and accounting Legal Obligation (Art. 6(1)(c))
Product improvements using aggregated data Legitimate Interest (Art. 6(1)(f))
4. Sub-processorsWe only share data with service providers necessary to operate Advera Returns.Provider Purpose Region
Shopify Orders, authentication and billing Global
Lovable Cloud / Supabase Application hosting & database EU
Cloudflare Security, CDN & DDoS protection GlobalNo other third parties receive your personal data.5. International Data TransfersApplication data is primarily stored within the European Union (EU).As Advera LLC FZ is established in the United Arab Emirates, our staff may occasionally access data from outside the EEA.Where this occurs, transfers are protected using:European Commission Standard Contractual Clauses (SCCs)
Appropriate technical and organisational safeguardsShopify and Cloudflare rely on their own approved international transfer mechanisms.6. Data RetentionWe only keep data for as long as necessary.Merchant Data
Stored while the App remains installed.
Permanently deleted after Shopify's shop/redact webhook is received following uninstallation.
End-customer Data
Customer information is anonymised after Shopify sends a customers/redact webhook.
Anonymisation is completed within 30 days.
Security Logs
Retained for a maximum of 90 days.
7. SecurityWe use industry-standard security measures, including:🔒 TLS encryption for all traffic
🔐 Encrypted OAuth tokens
🛡️ Row-Level Security (RLS) in the database
✅ Shopify HMAC webhook verification
👥 Restricted production access for authorised personnel only
8. Your RightsUnder the GDPR, individuals have the right to:Access personal data
Correct inaccurate information
Request deletion
Restrict processing
Receive a copy of their data (portability)
Object to processing
Lodge a complaint with a supervisory authority (e.g. Datatilsynet in Denmark)
End-customersRequests should be submitted to the merchant from whom the purchase was made. Advera assists merchants in fulfilling verified requests.MerchantsPlease contact us directly:📧 support@easyreturns.dkWe also fully support Shopify's automatic GDPR webhooks, including:customers/data_request
customers/redact