Privacy policy
1. Who we are
Revokerie - EU Withdrawal Form (the "app") is a Shopify app and, as Revokerie Anywhere, a service for other websites, made by Errie Studios, Markerkant 13-11, 1314 AL Almere, the Netherlands, registered with the Dutch Chamber of Commerce (KvK) under number 80513573 ("we", "us"). Contact: support@revokerie.com.
2. Our two roles
For data about the businesses that use the app ("merchants"), whether through Shopify or through a Revokerie Anywhere account, we are the controller.
For data that customers of a merchant submit through the withdrawal form, the merchant is the controller and we are the processor. We process that data only to provide the withdrawal function for that merchant, under our data processing addendum. Customers who want to exercise their privacy rights should contact the store where they bought the goods; we will help that store.
3. What we process and why
| Data | Purpose | Legal basis |
|---|---|---|
| Merchant data: store domain, store name, store email and customer-facing email, time zone, published languages, primary domain, plan and app settings | Providing the app, sending withdrawal notifications, showing the right plan | Contract (Art. 6(1)(b) GDPR) |
| Revokerie Anywhere account data: the account's email address, sign-in dates, and per site its name, website address, page address, time zone, languages, plan and settings | Providing the app and signing the merchant in with an email link | Contract (Art. 6(1)(b) GDPR) |
| Revokerie Anywhere billing data: Stripe customer and subscription IDs, plan, billing interval, subscription status and period dates. Name, billing address, VAT number and payment details are entered at Stripe; we do not receive card details. | Billing paid plans, applying the right plan and VAT | Contract, and our legal obligation to keep financial records (Art. 6(1)(c) GDPR) |
| Shopify API access tokens | Reading orders and tagging them on behalf of the merchant | Contract |
| Withdrawal data from customers: name, email address, order number, chosen products and quantities, optional comment, the withdrawal statement, date and time of submission, reference and email delivery status. For withdrawals made from the customer account, the email address is the order's email address, read from Shopify. | Receiving and recording withdrawals and sending the acknowledgment of receipt, on behalf of the merchant | Determined by the merchant as controller; usually a legal obligation under consumer law (Art. 6(1)(c) GDPR) |
| Order data read from Shopify: order ID, order email, line items, product tags and line item property names | Checking that order number and email belong together (or, in the customer account, that the order belongs to the signed-in customer) before showing order details, and marking exempt products. Only the withdrawn lines are stored, plus the order email for withdrawals from the customer account. Shopify only: Revokerie Anywhere reads no order data. | On behalf of the merchant |
| Grow options the merchant turns on: a webhook address, and the login for the merchant's own mail server (the password is stored encrypted) | Sending a short summary of each withdrawal (reference, order, name, email, products, optional reason) to the webhook the merchant chose, for example Slack, and sending customer emails through the merchant's own mail server | On behalf of the merchant, only when the merchant turns it on |
| Technical request data such as IP address, handled by our hosting provider. On Revokerie Anywhere sites, the visitor's country, derived from the IP address, chooses the right button label and whether the button is shown; it is not stored. | Security, abuse prevention and rate limiting; showing the right withdrawal button | Legitimate interest (Art. 6(1)(f) GDPR) |
The app adds no analytics or advertising trackers, on this website, in the app or on the withdrawal form. The only cookie we set is the sign-in cookie of the Revokerie Anywhere dashboard on app.revokerie.com, which is strictly necessary and lasts up to 30 days or until you sign out. The withdrawal form sets no cookies; in a Shopify store it is shown inside the merchant's store, where the merchant's own cookies and scripts apply. We do not sell data and do not use it for marketing.
4. Sub-processors
| Provider | Service | Location |
|---|---|---|
| Cloudflare, Inc. | Hosting, database, sending of emails, network security | Database in the European Union; requests, rate-limit counters, logs and emails are handled in Cloudflare's global network |
| Shopify | The platform the Shopify app runs on; order data comes from the merchant's store | Under the merchant's own agreement with Shopify |
| Stripe Payments Europe, Limited | Payments and invoices for Revokerie Anywhere paid plans (merchant data only, never data of the merchant's customers). For its own legal duties, such as fraud prevention and anti-money laundering checks, Stripe acts as an independent controller under its own privacy policy. | Ireland (EU); Stripe may also process data in the United States |
| Services the merchant chooses (Grow) | The merchant's own mail server and webhook receiver, when turned on | Chosen and controlled by the merchant |
Where data is processed outside the European Economic Area, transfers rely on the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.
5. How long we keep data
Withdrawal records are kept while the app is installed, so the merchant can show when a withdrawal was received. When Shopify forwards a customer's erasure request, we remove the name, email address, comment and statement from that customer's records; the order reference, products and timestamps remain as proof of the withdrawal itself. After a merchant uninstalls the app, access tokens are deleted immediately and all data of that store is deleted when Shopify sends its store erasure request, 48 hours after uninstalling. When a merchant deletes a Revokerie Anywhere site, its page goes offline at once, the merchant receives its records as a CSV file, and all data of that site is deleted 48 hours later. A Revokerie Anywhere account without sites is deleted 30 days after its last sign-in; ask us if you want it deleted sooner. Sign-in links expire after 15 minutes and are deleted a day later; we keep only a hash of each link. Invoices and payment records are kept by Stripe and by us for as long as tax law requires, in the Netherlands seven years. Failed acknowledgment emails are retried for seven days. Database backups are kept for up to 30 days and then expire.
6. Security
All traffic is encrypted with TLS. Access tokens are encrypted at rest with AES-GCM, and the database is encrypted at rest by our hosting provider. The app asks Shopify only for the permissions it needs, requests are verified with Shopify signatures, and order details are only shown after both order number and email match. Revokerie Anywhere has no passwords: merchants sign in with a single-use email link, and the sign-in cookie is signed, HttpOnly and ends on every device when the merchant signs out.
7. Your rights
You can ask for access to, correction or erasure of your personal data, restriction of or objection to its processing, and a copy of your data. Merchants can contact us directly. Customers of a store should contact that store, which controls the data; we assist the store with the request. You can also file a complaint with the Autoriteit Persoonsgegevens (Dutch Data Protection Authority), Postbus 93374, 2509 AJ The Hague, autoriteitpersoonsgegevens.nl.
8. Changes
We update this policy when the app or the law changes. The date at the top shows the current version. Material changes are announced to merchants in the app or by email.