Pleero LogoPleero← Back to Home

Privacy Policy

Last updated: September 23, 2026

1. Overview

Pleero (“we,” “us,” “our”) is building return and refund abuse protection for Shopify: scoring returns, refunds, and delivery claims against a merchant's own order history before money leaves the business, so good customers are never punished for the actions of a few.

Pleero is under active development. Today it analyses your order history, read-only, to show you what it would have flagged. It takes no action on any order or customer. Remediation actions and the Abuse Network are not yet live. This policy describes what we actually collect and do today, and will be expanded — with jurisdiction-specific detail — as each capability ships, not before.

2. Data We Collect Today

If you install Pleero on your Shopify store, we collect:

  • Store identifier: your shop domain (e.g. yourstore.myshopify.com)
  • Access token: a Shopify access token, encrypted at rest, used to authenticate API requests on your behalf
  • Contact email: an email address associated with your account, for service communication

If you submit your email through our website to be notified when Pleero is ready, we store that email address and nothing else about you.

Pleero also works with data about your customers, read from Shopify through its API within the access Shopify grants us. For each customer we store only derived figures, keyed by Shopify's numeric customer ID:

  • counts of their orders, returns, and refunds, and the amounts involved
  • dates of their first and most recent order and return
  • the risk scores and plain-language reasons we calculate from those figures
  • your own confirm or dismiss decision on a customer we flagged

We do not store customer names, email addresses, phone numbers, or addresses. Customers are shown to you by ID, and you can open them in Shopify.

3. What We Don't Do

  • We do not sell personal information to anyone.
  • We do not send the data described above to advertising or analytics platforms.
  • We do not duplicate your Shopify order, product, or customer records — Shopify remains the source of truth, and we store only the derived figures described above.
  • We do not use your customers' data for advertising, and we do not share it with other merchants.

4. Third-Party Services

Operating Pleero today involves these providers:

  • Shopify Inc. — the platform Pleero integrates with. See shopify.com/legal/privacy.
  • DigitalOcean LLC — hosts our backend infrastructure. See digitalocean.com/legal/privacy-policy.
  • Cloudflare Inc. — DNS, CDN, and DDoS protection in front of our infrastructure. See cloudflare.com/privacypolicy.

We will add to this list, and provide Data Processing Agreements on request, before any new sub-processor handles your data — not after.

5. Security

  • Shopify access tokens are encrypted at rest (Fernet/AES-256), never stored in plain text.
  • All traffic uses HTTPS.
  • Every webhook Shopify sends us is cryptographically verified (HMAC) before we act on it.
  • Our database and cache are never exposed outside our private network.

No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

6. Automated Decisions and Human Review

Pleero calculates risk scores to help you decide which returns and refunds deserve a closer look. Today those scores are shown to you only; nothing is approved, declined, or changed automatically, and no customer is told anything. When actions that affect customers are introduced, we will describe them here first. Our design commitments are that scores are advice you can always override, that nothing is declined automatically unless you turn that on yourself, and that customers who have a legal right to a refund are never declined or steered to store credit.

7. Data Retention

Your shop domain, access token, and contact email are retained while you have Pleero installed. Uninstalling triggers Shopify's mandatory shop/redact webhook roughly 48 hours later, at which point we delete your merchant record. An email submitted through our “notify me” form is kept until we reach out or you ask us to remove it.

The per-customer figures and your decisions described above are kept while Pleero is installed. When Shopify tells us a customer has asked for their data to be erased (customers/redact), we delete that customer's figures and your decisions about them, and strip the customer identifier from any score records, which we keep only as an anonymous record of what was calculated. When your shop is redacted after uninstall, all of it is deleted with your merchant record.

If we have not seen any activity from your store for 13 months — no one has opened the app — a scheduled job deletes these per-customer figures and your decisions automatically. Your shop record, access token, and contact email are not affected; if you open the app again after that, Pleero simply re-reads your order history and rebuilds them, the same as it did on your first install.

8. Your Rights

You can ask us what data we hold about you, request its correction, or request its deletion, by emailing privacy@pleero.app. We will respond within 30 days. Depending on where you live, you may have additional rights under laws such as the GDPR, UK GDPR, or CCPA — we intend to honor them, and we will publish a jurisdiction-by- jurisdiction breakdown once we have taken the legal advice necessary to state it accurately rather than guess.

9. Changes to This Policy

We will update this page as Pleero's actual capabilities change, and update the date above when we do. This document is product context, not a substitute for professional legal advice, and nothing here should be read as a permanent legal commitment beyond what the current version states.

10. Contact

Email privacy@pleero.app with any question about this policy or your data.

Questions about this document?

privacy@pleero.app
Privacy PolicyTerms of ServiceHome

© 2026 Pleero. All rights reserved.