Legal

Privacy policy

Effective September 8, 2026

Gooper.io helps Shopify merchants offer customer-confirmed returns through compatible AI assistants. This policy explains the data the app uses to provide that service.

Information we process

• Merchant account and shop information, including the shop domain, Shopify session, access scopes, and configured return policy.
• Return records, including Shopify order, line-item, return, and refund identifiers, quantities, status, amount, currency, and timestamps.
• A keyed hash of the customer identifier. Gooper.io does not store the raw customer identifier in its operational return records.
• Technical records needed for security, webhook deduplication, idempotency, troubleshooting, and compliance requests.

How we use information

We use this information to authenticate shops and customers, determine return eligibility, calculate and submit confirmed returns, reconcile Shopify status updates, prevent duplicate refunds, support merchants, protect the service, and meet legal obligations.

Merchant discovery records

When a store cannot be found, Gooper.io may retain its business name or domain, issue category, source, and timestamps for private service improvement and merchant opportunity review. These records are not shared with merchants and do not trigger outreach. They exclude customer identifiers, order/item details, conversation text, and URL paths or queries. Reports are grouped by merchant per day, remain unverified, and expire after 90 days; expired records are removed during subsequent reporting activity.

Customer authentication and payments

Customer Account access tokens are used to validate the request and read the authenticated customer's eligible order information. They are not stored in Gooper.io's return records. Gooper.io does not collect debit or credit card numbers. Shopify and the merchant's payment provider process refunds to the original payment method.

The customer return portal stores access tokens encrypted in a separate, short-lived session. The browser receives an opaque, HttpOnly session cookie, not the token. Portal sessions expire within four hours and are removed on sign-out, expiry cleanup, applicable redaction requests, or app uninstall.

Sharing and service providers

Information is shared with Shopify when needed to operate the app. We may use infrastructure providers to host the app and database. We do not sell personal information or use it for cross-context behavioral advertising.

Retention and deletion

We retain records only as long as needed to operate, secure, and support the service or meet legal obligations. Gooper.io processes Shopify's mandatory customer data request, customer redaction, and shop redaction webhooks. Local shop data is also deleted when the app receives an uninstall webhook.

Security

We use access controls, signed webhook verification, scoped Shopify permissions, hashed customer references, and idempotency controls. No system is completely secure, and we cannot guarantee absolute security.

Your choices

Customers can contact the Shopify merchant where they placed their order to request access, correction, or deletion. Merchants can uninstall the app and can contact us through the support channel shown on the Gooper.io support page or Shopify App Store listing.

Changes

We may update this policy as the service or legal requirements change. An updated effective date will appear at the top of this page.