KeptwisePrivacy Policy
Last updated: November 4, 2026
Keptwise (“Keptwise”, “we”, “us”) is a Shopify app that helps merchants recognize customers who abuse refunds, returns and chargebacks. This policy explains what data we collect, why, how long we keep it and the choices merchants and their customers have. It covers the Keptwise app and this website, getkeptwise.com.
Who is responsible for the data
When a merchant installs Keptwise, the merchant decides how their store's customer data is used, and Keptwise processes it on the merchant's behalf to provide the app. For the early access list on this website, Keptwise is responsible for the data you give us.
Keptwise is operated by [LEGAL NAME], [CITY, PROVINCE/STATE, COUNTRY]. Contact us at support@getkeptwise.com.
Data the Keptwise app collects
When a merchant installs Keptwise, it reads data from their Shopify store through Shopify's API:
| Data | What we store | Why |
|---|---|---|
| Customer email, phone number, shipping address and the IP address used to order | Only as one-way cryptographic hashes, which can be compared but not turned back into the original. We also keep a partly hidden email (for example, “ta***@example.com”) so the merchant can recognize the customer. | To recognize the same customer across orders, including under a new email. |
| Orders | Order number, date, total, currency, item count, discount codes used and the Shopify customer ID. | To rate each order's risk and build the Health Check. |
| Refunds, chargebacks and deliveries | Amounts, dates, whether items were returned, chargeback reasons and status, and whether an order was shipped with tracking and delivered. | To tell honest returns apart from refund abuse and “never arrived” claims. |
| Store information | The store's Shopify domain, the merchant's Keptwise settings and billing usage. | To run the app and calculate usage charges. |
Keptwise does not collect payment card details, and it does not sell data or use it for advertising. Store data is never shared with or shown to other merchants.
What Keptwise does in the merchant's store
Keptwise adds a risk rating to orders in the Shopify admin. If the merchant turns these features on, it also adds tags to customer records (such as “keptwise-kept-goods”) and places fulfillment holds on high-risk orders. Both are off until the merchant turns them on, and the merchant decides what to do with every flagged order.
Data from this website
If you join the early access list, we collect your email address, store URL, monthly sales range and industry. We use them to contact you about early access, your Health Check and occasional updates. You can unsubscribe from any email at any time. This website does not use advertising cookies.
How long we keep data
- Order history is kept for 24 months, then deleted automatically.
- When a merchant uninstalls Keptwise, Shopify asks us to delete that store's data, and we delete all of it, usually 48 hours after the uninstall.
- When a customer asks a merchant to erase their data, we delete that customer's orders and history.
- Early access list data is kept until you unsubscribe or ask us to delete it.
Requests from customers
Shoppers whose orders a merchant has shared with Keptwise can ask that merchant to access or delete their data. Shopify passes these requests to us, and we answer them within 30 days: we give the merchant the data we hold about the customer, or delete it. You can also contact us directly at support@getkeptwise.com.
How we protect data
- Data is encrypted in transit (HTTPS) between Shopify, Keptwise and our hosting provider.
- Customer identifiers are stored only as keyed one-way hashes.
- Access to production systems is limited to the people who run Keptwise.
- If a breach affects your data, we will notify affected merchants and authorities as the law requires.
Service providers
| Provider | Purpose | Location |
|---|---|---|
| Shopify | The platform Keptwise runs on, and billing | Canada and other locations |
| Render | Hosting the app and its database | United States |
| [EMAIL LIST PROVIDER] | Early access emails | [LOCATION] |
Your rights
Depending on where you live, including under Canada's PIPEDA, the GDPR in Europe and the CCPA in California, you may have the right to access, correct or delete your data, or object to how it's used. Contact us at support@getkeptwise.com and we'll respond within 30 days.
Changes to this policy
If we change this policy in a way that matters, we'll update the date above and tell merchants in the app or by email.