Privacy

When you connect a Shopify store, Appease requests two read-only scopes: read_orders and read_customers. We use them to read your orders and their refunds for the period being audited. We never request write access, and no data is ever written back to your store.

If you upload a CSV export instead, we read the file in memory to produce your report.

Your store domain and the access token Shopify issues, so an audit can be re-run without asking you to reconnect.

The settings you enter during setup: your contact email and the four policy rules.

Aggregate results of each audit — totals such as number of refunds, amount refunded and amount identified as outside policy.

We do not store your shoppers' names, email addresses, order contents or payment details. Order-level data is read from Shopify at the moment an audit runs, used to produce the report, and not retained afterwards.

Ticket text submitted for classification is sent to Anthropic's API and is not used to train models. Everything else stays within our own infrastructure: Vercel (hosting, EU and US regions) and Supabase (database, eu-central-1).

We do not sell data, share it with advertisers, or use one merchant's data on behalf of another.

Uninstall Appease from your Shopify admin and the access token is deleted automatically.

For complete erasure, email henrik@appease.tech and everything tied to your store is deleted within 48 hours. Shopify's shop/redact request does the same thing automatically.

Appease stores no shopper personal data, so there is nothing to return or erase in response to an individual customer data request.

Appease is operated from Norway and subject to the GDPR. Questions, requests and complaints: henrik@appease.tech — answered in writing, usually the same day.