Privacy Policy

Last updated: June 1, 2025

1. Introduction

RecoverKit ("we", "our", or "us") is a Shopify app that helps merchants recover abandoned carts and re-engage lapsed customers. This Privacy Policy explains how we collect, use, and protect information when you use our app.

2. Information We Collect

When you install RecoverKit, we collect and process the following data:

• Store information: Your Shopify store domain, store name, and email address.
• Customer data: Customer email addresses, cart contents, and order history — used solely to send recovery emails on your behalf.
• Session data: Visitor sessions, page views, and conversion events tracked via our web pixel.
• Email engagement: Email open and click events to measure campaign performance.

3. How We Use Your Data

• To send automated cart and checkout recovery emails to your customers.
• To run win-back campaigns for lapsed customers.
• To provide analytics, revenue attribution, and performance reports.
• To improve our services and fix issues.

4. Data Sharing

We do not sell your data or your customers' data to any third parties. We use the following trusted service providers:

• Resend — for sending transactional emails.
• Supabase — for secure data storage.
• Upstash — for job queue processing.

5. Data Retention

We retain your data for as long as your app subscription is active. When you uninstall the app, we begin the process of deleting your store data within 30 days in accordance with Shopify's GDPR requirements.

6. GDPR Compliance

We support all mandatory Shopify GDPR webhooks:

• Customer data requests: We will provide customer data upon request within 30 days.
• Customer data deletion: We will anonymize customer personal data upon request.
• Shop data deletion: We will delete all store data within 30 days of uninstallation.

7. Customer Unsubscribe

All recovery emails include an unsubscribe link. Customers who unsubscribe will not receive further emails from your store via RecoverKit.

8. Security

We use industry-standard security measures including encrypted connections (HTTPS), secure database storage, and HMAC webhook verification to protect your data.

9. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

Email: support@recoverkit.com

RecoverKit is developed and maintained by Sdev.