我們處理的訊息
當您以商店、合作夥伴或投資者身分申請時，我們會使用您的聯絡資料及提供的業務資訊來審核申請並回覆。申請透過 Brevo 傳送給我們的團隊，不會建立帳戶。
對於直銷商家帳戶，我們會處理帳戶持有人姓名和email地址、企業或商店名稱、店面URL、所選電子商務平台、銷售貨幣、每月總銷售額、平均銷售額、當前卡支付爭議率、發票記錄、業務設定和店面活躍度測試記錄。銷售和卡片支付爭議數據是商家提供的店鋪層面的總數據，而不是單一客戶的交易記錄。
For the Shopify App, we process Shopify installation identifiers, store configuration, operational order references, timestamps, amounts, currencies, payment and transaction identifiers, risk assessments, merchant decisions, dispute status, reasons, amounts, currencies and deadlines, provider alerts and connection configuration, audit records, billing status, and verified merchant notification recipients.
證據存取需要 Shopify 權限及受保護客戶資料的核准。啟用後，會從 Shopify 讀取客戶姓名、電子郵件、帳單地址及收貨地址，用於爭議審查及經商家確認的證據提交。不要求客戶電話號碼或 IP 位址。Lower Chargeback 不聯絡客戶或收集回覆。
商店擁有者可以在 Lower Chargeback 內儲存加密的商家資料與爭議資訊。Shopify 的值優先，儲存手動輸入的資訊絕不會變更 Shopify 記錄。
通知收件人
Entered and verified by the merchant; never imported from Shopify customer records.
支付和決策邊界
Direct account invoice records contain the invoice amount and status, but Lower Chargeback does not store card numbers. Provider credentials are encrypted before storage and are never returned after they are saved. The Shopify App does not create Shopify refunds, automatically accept or decline network cases, automatically report provider outcomes, send customer messages, or submit dispute evidence without explicit merchant confirmation.
如何使用資訊
Direct account information is used to create and secure the merchant account, issue and display the registration invoice, send account and invoice messages, maintain business settings, run storefront liveness tests, and record their results. Shopify App information is used to synchronize operational order data, present risk signals, record merchant decisions, monitor disputes, match provider alerts to eligible order references, notify verified merchant recipients, maintain billing entitlements and provider connection state, and record merchant-confirmed provider actions.
證據草稿及商家上傳的 PDF、PNG 和 JPEG 文件用於準備爭議資料。文件以私密方式儲存，僅在商家確認後傳送給 Shopify。確認提交後，上傳的檔案會進入刪除佇列；其餘證據記錄最遲於案件結案後 30 天內刪除。
服務提供者
Lower Chargeback uses Cloudflare for Worker execution and storage. Brevo sends transactional account, invoice, and operational merchant notifications. For the Shopify App, Lower Chargeback also uses Shopify for operational commerce data and embedded application services, together with only the merchant providers explicitly connected and verified through Provider Hub.
These providers may process information in countries outside the merchant’s country. Where a cross-border transfer requires safeguards, Lower Chargeback relies on the contractual and transfer mechanisms made available by the applicable provider and required by data-protection law.
保留和刪除
Direct-account data is retained while needed to provide that account and meet its audit obligations. For the Shopify App, operational order, transaction, risk, dispute, and operational aggregate records are retained for no more than 180 days after their last relevant activity. Active provider cases and their source records remain available while action is required; terminal provider cases and their source identifiers, actions, and events are deleted 30 days after closure. Shopify App audit records, observed Shopify users, notification deliveries, and terminal provider-webhook metadata are retained for no more than 180 days.
提供者 Webhook payload 物件和 Shopify App Webhook 接收記錄保留不超過 30 天。
安裝設定、加密憑證、已驗證的收件者、彙總計費權益，以及遵守資料刪除要求所需的最少記錄，僅在應用程式已安裝或啟用的服務需要時保留。解除安裝會撤銷有效的 Shopify 憑證，並開始刪除該安裝的 Shopify 資料。Shopify 合規性 Webhook 具有優先權，並會啟動客戶或商店資料刪除。子處理者備份生命週期仍受適用提供者服務條款的約束。
安全和訪問
Production secrets are held in Cloudflare secret configuration. Stored provider credentials and Shopify authorization tokens use authenticated encryption. Administrative access is restricted, operational changes are audited without customer identity values, production data is not copied into demo or test datasets, and security incidents are investigated and contained through the documented response procedure.
聯絡方式
商家和資料主體可以透過 emailing 請求存取、更正、刪除、限製或與其相關的資訊副本，或反對符合資格的處理 marian@agilemedia.com. The request should identify the relevant shop and relationship to the data so Lower Chargeback can verify authority before responding. Shopify privacy requests may also be initiated through the merchant, which delivers the required Shopify compliance webhook.
通訊地址：Intrarea Gheorghe Simionescu 19，公寓 B26，布加勒斯特 031779，羅馬尼亞。