Privacy Policy

Who we are

Return Address (returnaddress.app) is a Shopify app operated by Quantra Technology & Innovation, Inc. (“Quantra”, “we”) that helps merchants recover abandoned checkouts by sending recovery emails and printed mail pieces on the merchant’s behalf. For the shopper data described below, the merchant is the data controller and we act as a processor on their instructions.

Data we process

When a merchant installs the app, we receive data from Shopify strictly to provide the service:

• Abandoned checkout data — customer name, email address, shipping and billing address, the items and value of the cart, and Shopify’s checkout recovery link.
• Store data — store name, domain, contact email, currency, and the settings the merchant configures in the app (including the postcard return address).
• Send activity — the content of recovery messages we generate, delivery identifiers from our providers, and whether a recovery link or QR code was used, so recovered orders can be attributed and usage billed accurately.

We do not collect payment card details, and shoppers check out only through Shopify — never through us.

How we use it

Only to operate the service for the merchant: deciding which abandoned checkouts qualify under the merchant’s rules, writing and sending recovery emails and mail pieces, attributing recovered orders, and billing usage through Shopify. We do not sell personal data, use it for advertising, or use one merchant’s data for another merchant’s benefit.

Service providers

We use a small set of subprocessors, each receiving only what its role requires:

• Vercel — application hosting.
• Supabase — database hosting.
• Resend — recovery email delivery.
• Lob — printing and mailing physical recovery pieces (receives recipient name, mailing address, and the card artwork, which can include product images from the cart).
• OpenAI — on plans with personalized copy, receives the shopper’s first name, the cart’s product titles, and the store name to write the message. It never receives email addresses, mailing addresses, or order history.

Shopper choices

Every recovery email carries a one-click unsubscribe. Unsubscribing suppresses that email address for that store permanently; we keep the suppressed address itself so the opt-out can be honoured. A cart that is completed, cancelled, or expired stops all further sends for it automatically.

Where data lives

The service is operated from the United States and data is processed and stored in the United States by the providers listed above. We set no advertising or tracking cookies; the merchant dashboard is authenticated with Shopify-signed session tokens only.

Retention and deletion

• When a merchant uninstalls the app, our access credentials are revoked immediately and the store’s data is deleted when Shopify issues its uninstall redaction request.
• When a shopper asks their merchant for erasure, Shopify’scustomers/redact request causes us to erase that shopper’s personal data (name, email, addresses, message content) while preserving the merchant’s anonymous revenue records.
• When a shopper asks their merchant for their data, we deliver what we hold to the merchant, who responds to their customer.

Security

All traffic is encrypted in transit. Data is stored in an access-controlled database reachable only by the application backend, and Shopify access tokens are short-lived and rotated automatically. Merchant dashboards are authenticated with Shopify-signed session tokens, so only a store’s own staff can see its data.

Contact

Questions or requests about this policy: Quantra Technology & Innovation, Inc. — support@returnaddress.app. If you are a shopper, contact the store you purchased from first — under data-protection law they are the controller of your data, and we act on their instructions.