Privacy policy

Effective October 24, 2026

This policy explains what personal information Nottifai LLC ("Nottifai", "we" or "us") handles through Return Autopilot, a Shopify app. It says where the information comes from, what we use it for, who we share it with, how long we keep it and what rights people have over it.

Who this policy covers

Return Autopilot is an app that Shopify merchants install on their stores. This policy covers two groups of people.

• Merchants. These are the store owners and staff who install and use the app. Merchants are Nottifai's customers.
• Shoppers. These are the customers of a merchant's store. Shoppers never sign up with Nottifai. We receive their information only because a merchant installed the app on the store they bought from.

Our role

For shopper information, the merchant is the controller and Nottifai is a processor. We handle shopper information only to run the app for that merchant and only on that merchant's instructions. The merchant's own privacy policy explains how the merchant uses its customers' information.

For merchant account information, such as the details of the staff who open the app, Nottifai is the controller.

Information we collect

The app stores the following information for each store in its own database.

Store and staff account information

• Shopify session data for the store. This is the shop domain, an access token and the permissions the merchant granted.
• For staff who open the app, Shopify may provide the staff member's name, email address and language setting.

Settings and rules

• The merchant's app settings, the rules the merchant creates and the merchant's return fee settings.

Return and exchange cases

• The order ID and order name.
• The shopper's Shopify customer ID, name and email address.
• The items returned and their quantities, and any items chosen in exchange.
• The return reason and any note the shopper wrote.
• The order value, any price difference and any fees.
• Order and customer facts that the merchant's rules use. Examples are order tags, customer tags, the delivery date, the number of past orders and the number of past returns.

Decisions and the activity log

• The decision on each request and an activity log of what the app and staff did, including notes staff write.

Customer messages

• Messages the app writes to a shopper about their request, such as a declined exchange. We store the subject, the body and the recipient's email address.

Support emails

• If you email us, we receive your email address and your message and use them to answer you.

Where the information comes from

• The Shopify Admin API and Shopify webhooks. The app asks Shopify for these permissions: read_customers, read_orders, read_products, read_returns, write_orders and write_returns.
• The Return Autopilot extension in Shopify customer accounts, when a shopper requests an exchange.
• Merchant staff, when they set up the app, create rules, make decisions or write notes.

How we use the information

We use the information only to run the app's features for the merchant whose store it came from. That means we use it to do the following.

• Decide and process return and exchange requests under the merchant's rules.
• Show the merchant their queue of requests and their activity log.
• Send the merchant's customers messages about their request.
• Count the merchant's own requests, so the app can apply the usage limits of the merchant's plan.
• Answer support requests the merchant sends us.

We do not sell personal information. We do not use it for advertising. We do not build profiles of anyone for any other company. We do not share one merchant's data with another merchant, and we do not use one merchant's data to serve another.

Where the GDPR or UK GDPR applies to merchant account information, we rely on two legal bases. The first is performing our contract with the merchant. The second is our legitimate interest in running and securing the app.

Assist features

The app drafts rules from a merchant's return policy, detects return reasons in a shopper's return note and drafts customer messages. Today these features run on built-in rules on our own servers, and the app sends nothing to an AI provider.

We may later run these features on Anthropic, PBC's Claude models. Before that change, we will update this policy and its effective date and tell merchants in the app. From then on, the app would send Anthropic only the following.

• The merchant's written return policy.
• The shopper's return note.
• The product title and the titles of the items in the request.
• The return reason the shopper selected.
• The store name.
• Notes written by the merchant's staff.

The app would not send Anthropic shopper names, email addresses, postal addresses or payment details.

Service providers

We use these companies to run the app. Each one receives only what it needs for its task.

• Shopify. Return Autopilot runs on the Shopify platform, and Shopify handles all billing for the app.
• Railway Corporation, in the United States. Railway hosts the app and its database, so it stores the information described in this policy.
• Cloudflare, Inc. Cloudflare hosts these public web pages only. It receives no app data. Like any web host, it receives the technical data needed to deliver a page, such as your IP address.
• Anthropic, PBC. Not used today. The section on assist features says when we would start and what it would receive.
• Resend. Resend delivers the app's emails to shoppers once we turn on email sending. It receives the recipient's email address and the message.

We also disclose information when the law requires it, such as to comply with a valid court order.

Where the information is stored

The app and its database run in the United States. If you are outside the United States, your information is transferred to and processed in the United States.

How long we keep information

We keep a store's data while the app is installed on that store, so the merchant can see their requests and activity log. Data leaves our systems in these cases.

• When a merchant uninstalls the app, the app deletes the store's session at once.
• Shopify sends a shop/redact request 48 hours after the merchant uninstalls. The app then deletes all of the store's data, including its settings, rules, cases, decisions and messages.
• When Shopify sends a customers/redact request for a shopper, the app deletes that shopper's cases, decisions and messages for that store.

Backups of the database may keep deleted data for up to 30 days, after which it is gone.

Requests for a shopper's data

When a shopper asks a merchant for their data, Shopify sends the app a customers/data_request request. The app compiles what it holds about that shopper and gives it to the merchant, who answers the shopper. We respond to these requests within 30 days.

Security

• All data travels over encrypted HTTPS connections.
• Only Nottifai staff who need access to the production systems have it.
• The app checks the HMAC signature on every Shopify webhook and rejects any request that fails the check.

No method of storing or sending data is perfectly secure, and we cannot promise that information will never be accessed without permission.

Your rights

If you are a shopper, please contact the store you bought from first. The merchant controls your information, and we help the merchant answer your request. If you contact us directly, we will work with the merchant to answer your request.

If you are a merchant, or if you contact us about your own information, email support@nottifai.com. We reply within 30 days. We may need to confirm your identity first.

European Economic Area and United Kingdom

Under the GDPR and the UK GDPR, you have the right to do the following.

• Access the personal information we hold about you.
• Correct information that is wrong.
• Delete your information.
• Object to how we use your information.
• Receive your information in a portable format.
• Complain to your local data protection supervisory authority.

California

We do not sell or share personal information, as the CCPA and CPRA define those terms. The personal information we handle falls into these categories.

• Identifiers, such as a name, an email address and a Shopify customer ID.
• Commercial information, such as orders, returns and exchanges.

California residents have the right to know what personal information we collect and how we use it, to delete it and to correct it. We will not treat you differently for using these rights.

Children

Return Autopilot is not directed at children under 16, and we do not knowingly collect information from them.

These web pages

These pages set no cookies and run no analytics or tracking scripts.

Changes to this policy

When we change this policy, we update the effective date at the top. We announce material changes in the app or by email to the store's contact address.

Contact

Email support@nottifai.com with any question about this policy or your information, or write to us at the address below.