Privacy Policy

Last updated: March 24, 2026

RevCure ("we", "us", "our") is a Shopify application operated by DecisionFlow. This policy describes how we collect, use, and protect data from Shopify merchants who install our app.

What Data We Collect

When you install RevCure, we access the following Shopify data through their API:

• Checkout data: Checkout IDs, tokens, total price, payment method, and timestamps. Used to track checkout starts.
• Order data: Order IDs, checkout tokens, and completion timestamps. Used to match checkouts with completed orders.
• Customer email: Used solely for deduplication of checkout sessions. We never contact customers directly.

How We Use Data

We use collected data exclusively to:

• Detect silent checkout failures by comparing checkout starts with order completions
• Calculate failure rates by payment method
• Alert merchants when anomalies are detected
• Display checkout health analytics in the merchant's Shopify admin

Data Storage & Security

• Data is stored in encrypted PostgreSQL databases
• All data is transmitted over HTTPS/TLS
• Data is retained based on your plan tier (7-90 days) and automatically deleted after
• We do not sell, share, or transfer merchant or customer data to third parties

Data Deletion

When you uninstall RevCure, all data associated with your store is permanently deleted within 48 hours. You can also request immediate deletion by emailing [email protected].

Customer Data

We process minimal customer data (email addresses only) for the sole purpose of checkout session deduplication. We comply with all Shopify requirements for protected customer data handling. We never contact customers, never sell customer data, and never use it for marketing.

GDPR & CCPA Compliance

We support Shopify's mandatory compliance webhooks for customer data requests, customer data erasure, and shop data erasure. We respond to all data subject requests within the required timeframes.

Contact

For privacy questions, contact us at: [email protected]