Legal

Privacy Policy

Last updated: April 5, 2026

Recovered ("we", "our", or "us") is a Shopify application that helps merchants recover abandoned shopping carts through automated email and WhatsApp messages. This Privacy Policy explains how we collect, use, and protect information when you use our app.

1. Information We Collect

When you install Recovered on your Shopify store, we may collect and process the following information:

• Merchant information: Your Shopify store domain, access tokens, and account settings.
• Customer data: Names, email addresses, phone numbers, and shipping country of customers who abandon carts in your store. This data is received via Shopify webhooks.
• Cart data: Product details, cart values, checkout URLs, and order information from abandoned checkouts.
• Message settings: Your AI persona configuration, discount offers, and sending preferences.

2. How We Use Your Information

We use the collected information to:

• Generate and send AI-crafted abandoned cart recovery messages on your behalf.
• Detect and filter suspicious or bot-generated cart activity.
• Track message delivery and cart recovery outcomes for your dashboard.
• Improve the accuracy and relevance of AI-generated messages.
• Provide customer support and respond to your inquiries.

3. Data Sharing and Third Parties

We share data with the following third-party services to operate our app:

• OpenAI: Customer cart data is sent to OpenAI's API to generate personalized recovery messages. OpenAI does not use this data to train models.
• SendGrid (Twilio): Customer email addresses are used to deliver recovery emails via SendGrid.
• PostgreSQL: We store cart and message data in a self-hosted PostgreSQL database on a secure private server.
• Judge.me: If you provide a Judge.me API token, product reviews are fetched to enhance message quality.

We do not sell your data or your customers' data to any third parties.

4. Data Retention

We retain abandoned cart and message data for as long as your app subscription is active. When you uninstall the app, we retain your data for up to 48 hours, after which all store and customer data is permanently deleted in response to Shopify's shop redaction webhook.

5. GDPR and Privacy Rights

We comply with Shopify's mandatory privacy compliance requirements. If a customer requests access to or deletion of their personal data, you can contact us and we will fulfill the request within 30 days. We support:

• Data access requests: We can provide a summary of customer data we hold upon request.
• Data deletion requests: We will permanently delete customer personal data upon request.
• Shop redaction: All store data is deleted within 48 hours of app uninstallation.

6. Data Security

We implement industry-standard security measures to protect your data, including encrypted connections (HTTPS/TLS), secure database hosting, and access controls. However, no method of transmission over the internet is 100% secure.

7. Cookies

Our app does not use cookies directly. The Shopify admin interface may use cookies as part of Shopify's standard embedded app framework.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by updating the date at the top of this page. Continued use of the app after changes constitutes acceptance of the updated policy.