Sigmatize Returns — Privacy Policy

Last updated: 23 June 2026

Who we are

Sigmatize Returns (“we”, “the app”) is a Shopify app operated by Sigmatize. Contact: bringlifetobrand@gmail.com.

What we access and why

With the merchant’s authorization, via Shopify’s Admin API:

• Order & fulfillment data (read_orders, read_returns) — to display returnable items and create returns.
• Customer email and pickup/shipping address — only when a return or pickup is booked, to generate the carrier return label.
• Store identifiers and access tokens — to authenticate API requests.

We practice data minimization — only the fields needed to operate returns. We do not access payment card numbers or browsing history, and we do not sell, rent, or share customer data for advertising.

Third-party subprocessors

We share the minimum necessary data with:

• Shippo — return labels and address validation.
• PayPal — pickup-fee verification.
• A reputable cloud hosting provider — encrypted application hosting.

Security

Data is encrypted in transit (TLS 1.2+) and at rest. Access is least-privilege and limited to authorized personnel; access tokens are stored encrypted.

Data deletion & Shopify compliance webhooks

We implement Shopify’s mandatory privacy webhooks:

• customers/data_request — when a customer requests the personal data we hold, we compile the records associated with them (returns matched by email) so the merchant can fulfil the request within the legally required window.
• customers/redact — we anonymize that customer’s personal data, permanently nulling their email and pickup address while retaining only non-identifying return metadata (order reference, status, dates) for aggregate analytics.
• shop/redact — within 48 hours of a store uninstalling the app, we permanently delete all data associated with that store (returns, payment records, sessions).

Retention

We retain data only as long as needed to provide the service and meet legal obligations, subject to the deletion and anonymization rules above.

Your rights

Customers and merchants may request access to, correction of, or deletion of their data (GDPR/CCPA) by emailing bringlifetobrand@gmail.com.

Changes

We will post updates to this page and notify merchants of material changes.