Maklumat yang kami proses
Apabila anda memohon sebagai kedai, rakan kongsi atau pelabur, kami menggunakan butiran hubungan dan maklumat perniagaan yang anda berikan untuk menyemak permohonan anda dan memberikan respons. Permohonan dihantar kepada pasukan kami melalui Brevo dan tidak mewujudkan akaun.
Untuk akaun pedagang langsung, kami memproses nama dan alamat e-mel pemegang akaun, nama perniagaan atau kedai, etalase URL, platform e-dagang terpilih, mata wang jualan, agregat volum jualan bulanan, purata jualan, nisbah pertikaian pembayaran kad semasa, rekod invois, tetapan perniagaan dan rekod ujian keaktifan kedai. Angka pertikaian jualan dan pembayaran kad ialah agregat peringkat kedai yang dibekalkan oleh pedagang, bukan rekod transaksi pelanggan individu.
For the Shopify App, we process Shopify installation identifiers, store configuration, operational order references, timestamps, amounts, currencies, payment and transaction identifiers, risk assessments, merchant decisions, dispute status, reasons, amounts, currencies and deadlines, provider alerts and connection configuration, audit records, billing status, and verified merchant notification recipients.
Akses bukti memerlukan kebenaran Shopify dan kelulusan data pelanggan yang dilindungi. Apabila didayakan, nama, e-mel, serta alamat pengebilan dan penghantaran pelanggan dibaca daripada Shopify untuk menyemak pertikaian dan menghantar bukti yang disahkan pedagang. Nombor telefon dan alamat IP pelanggan tidak diminta. Lower Chargeback tidak menghubungi pelanggan atau mengumpulkan balasan.
Pemilik kedai boleh menyimpan butiran perniagaan dan maklumat pertikaian yang disulitkan secara setempat dalam Lower Chargeback. Nilai Shopify diutamakan dan penyimpanan maklumat manual tidak pernah mengubah rekod Shopify.
Penerima pemberitahuan
Entered and verified by the merchant; never imported from Shopify customer records.
Sempadan pembayaran dan keputusan
Direct account invoice records contain the invoice amount and status, but Lower Chargeback does not store card numbers. Provider credentials are encrypted before storage and are never returned after they are saved. The Shopify App does not create Shopify refunds, automatically accept or decline network cases, automatically report provider outcomes, send customer messages, or submit dispute evidence without explicit merchant confirmation.
Bagaimana maklumat digunakan
Direct account information is used to create and secure the merchant account, issue and display the registration invoice, send account and invoice messages, maintain business settings, run storefront liveness tests, and record their results. Shopify App information is used to synchronize operational order data, present risk signals, record merchant decisions, monitor disputes, match provider alerts to eligible order references, notify verified merchant recipients, maintain billing entitlements and provider connection state, and record merchant-confirmed provider actions.
Draf bukti serta dokumen PDF, PNG dan JPEG yang dimuat naik oleh pedagang menyokong persediaan pertikaian. Dokumen disimpan secara peribadi dan dihantar kepada Shopify hanya selepas pengesahan pedagang. Fail yang dimuat naik dimasukkan ke baris gilir pemadaman selepas penghantaran disahkan; rekod bukti selebihnya dipadamkan selewat-lewatnya 30 hari selepas kes ditutup.
Pembekal perkhidmatan
Lower Chargeback uses Cloudflare for Worker execution and storage. Brevo sends transactional account, invoice, and operational merchant notifications. For the Shopify App, Lower Chargeback also uses Shopify for operational commerce data and embedded application services, together with only the merchant providers explicitly connected and verified through Provider Hub.
These providers may process information in countries outside the merchant’s country. Where a cross-border transfer requires safeguards, Lower Chargeback relies on the contractual and transfer mechanisms made available by the applicable provider and required by data-protection law.
Pengekalan dan pemadaman
Direct-account data is retained while needed to provide that account and meet its audit obligations. For the Shopify App, operational order, transaction, risk, dispute, and operational aggregate records are retained for no more than 180 days after their last relevant activity. Active provider cases and their source records remain available while action is required; terminal provider cases and their source identifiers, actions, and events are deleted 30 days after closure. Shopify App audit records, observed Shopify users, notification deliveries, and terminal provider-webhook metadata are retained for no more than 180 days.
Objek muatan webhook pembekal dan rekod resit webhook Shopify App disimpan selama tidak lebih daripada 30 hari.
Konfigurasi pemasangan, bukti kelayakan yang disulitkan, penerima yang disahkan, kelayakan pengebilan agregat dan rekod minimum yang diperlukan untuk mematuhi keperluan pemadaman data disimpan hanya semasa Apl dipasang atau perkhidmatan yang didayakan memerlukannya. Menyahpasang membatalkan kelayakan Shopify aktif dan memulakan pemadaman data Shopify pemasangan. Webhook pematuhan Shopify mengambil keutamaan dan memulakan pemadaman data pelanggan dan data kedai. Kitaran hayat sandaran subpemproses kekal dikawal oleh syarat perkhidmatan penyedia yang berkenaan.
Keselamatan dan akses
Production secrets are held in Cloudflare secret configuration. Stored provider credentials and Shopify authorization tokens use authenticated encryption. Administrative access is restricted, operational changes are audited without customer identity values, production data is not copied into demo or test datasets, and security incidents are investigated and contained through the documented response procedure.
Kenalan
Pedagang dan subjek data boleh meminta akses, pembetulan, pemadaman, sekatan atau salinan maklumat yang dikaitkan dengan mereka, atau membantah pemprosesan yang layak, dengan menghantar e-mel marian@agilemedia.com. The request should identify the relevant shop and relationship to the data so Lower Chargeback can verify authority before responding. Shopify privacy requests may also be initiated through the merchant, which delivers the required Shopify compliance webhook.
Alamat surat-menyurat: Intrarea Gheorghe Simionescu 19, Pangsapuri B26, Bucharest 031779, Romania.