ChargeFix, Inc. ("ChargeFix", "we", "us", or "our") provides this Privacy Policy to inform Shopify merchants ("you") of our policies and procedures regarding the collection, use, and disclosure of personal information received through our application, website, and services.
Zero Persistent PII Architecture: ChargeFix is engineered with strict statelessness. We do not store cardholder names, delivery addresses, customer emails, IP logs, or generated rebuttal texts in persistent application databases. Data is processed ephemerally in memory solely to assemble the evidence dossier and is immediately dispatched to your Shopify Admin.
1. Information We Access via Shopify APIs
When you install ChargeFix, you grant us permission via Shopify's OAuth protocol to access specific data strictly necessary for automated dispute representment:
- Dispute Data: Dispute ID, dispute reason code, amount, currency, evidence deadlines, and status from Shopify Payments.
- Order & Fulfillment Data: Order ID, order creation timestamp, line items/SKUs, customer billing/shipping addresses, carrier tracking numbers, and fulfillment status.
- Merchant Profile Data: Shop name, shop domain, and merchant email address for account authentication and transactional billing communications.
2. How We Use Information
We process the accessed data strictly for the following operational purposes:
- To correlate dispute notices with the corresponding Shopify customer order and carrier shipment records.
- To verify delivery confirmation and carrier tracking events (via carrier APIs such as EasyPost).
- To prompt our AI engine to generate tailored, legally structured rebuttal evidence packages compliant with Visa Compelling Evidence 3.0 and Mastercard dispute rules.
- To save the compiled evidence dossier directly into your Shopify Admin dispute portal.
- To record usage-based billing records through Shopify's Billing API upon merchant approval.
3. Artificial Intelligence & Third-Party Processing
To draft representment letters, ChargeFix utilizes enterprise AI language model APIs. Under our enterprise data processing agreements with AI providers:
- Customer and merchant data transmitted to the AI engine is processed ephemerally in memory.
- Customer data is never used to train, retrain, or improve public or foundation machine learning models.
- Zero customer PII is retained by our AI infrastructure partners once the evidence dossier is assembled.
4. Shopify Mandatory Compliance Webhooks
In full adherence to Shopify App Store Partner requirements, ChargeFix implements and actively responds to all mandatory privacy webhooks:
- customers/data_request: Provides details on any merchant or customer data processed by ChargeFix upon request.
- customers/redact: Purges any cached logs or references associated with a specific customer.
- shop/redact: Permanently purges all shop credentials, session tokens, and operational records within 48 hours of an app uninstallation.
5. GDPR & CCPA/CPRA Compliance
If you or your customers are located in the European Economic Area (EEA), United Kingdom, or California, you possess specific data protection rights under the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA/CPRA). Because ChargeFix does not maintain persistent customer databases, requests for erasure, access, or portability are processed immediately upon receipt via Shopify's privacy channels.
6. Security Measures
All data transmitted between Shopify, carrier APIs, AI processing engines, and ChargeFix is encrypted in transit using industry-standard Transport Layer Security (TLS 1.3) and HTTPS. Access to our internal infrastructure is restricted via role-based access control and multi-factor authentication.
7. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Any material changes will be posted on this page with an updated revision date, and active merchants will be notified via our app interface.
8. Contact Us
If you have questions or concerns regarding this Privacy Policy or ChargeFix's data practices, please contact our Data Protection Officer at:
ChargeFix Privacy Team
Email: privacy@chargefix.pro
General Support: contact@chargefix.pro