Pleero LogoPleero← Back to Home

Privacy Policy

Last updated: September 17, 2026

1. Overview

Pleero (“we,” “us,” “our”) is building return and refund abuse protection for Shopify: scoring returns, refunds, and delivery claims against a merchant's own order history before money leaves the business, so good customers are never punished for the actions of a few.

Pleero is under active development. The scoring, remediation, and Abuse Network capabilities described in our public materials are not yet live. This policy describes what we actually collect and do today, and will be expanded — with jurisdiction-specific detail — as each capability ships, not before.

2. Data We Collect Today

If you install Pleero on your Shopify store, we collect:

  • Store identifier: your shop domain (e.g. yourstore.myshopify.com)
  • Access token: a Shopify access token, encrypted at rest, used to authenticate API requests on your behalf
  • Contact email: an email address associated with your account, for service communication

If you submit your email through our website to be notified when Pleero is ready, we store that email address and nothing else about you.

We do not currently collect, process, or store any data about your customers. That begins only once the order-history scoring described above is live, at which point this policy will state exactly what customer-related data is used, why, and for how long — before it happens, not after.

3. What We Don't Do

  • We do not sell personal information to anyone.
  • We do not send the data described above to advertising or analytics platforms.
  • We do not duplicate your Shopify order, product, or customer records — Shopify remains the source of truth, and we pull data via its API only when a live feature needs it.

4. Third-Party Services

Operating Pleero today involves these providers:

  • Shopify Inc. — the platform Pleero integrates with. See shopify.com/legal/privacy.
  • DigitalOcean LLC — hosts our backend infrastructure. See digitalocean.com/legal/privacy-policy.
  • Cloudflare Inc. — DNS, CDN, and DDoS protection in front of our infrastructure. See cloudflare.com/privacypolicy.

We will add to this list, and provide Data Processing Agreements on request, before any new sub-processor handles your data — not after.

5. Security

  • Shopify access tokens are encrypted at rest (Fernet/AES-256), never stored in plain text.
  • All traffic uses HTTPS.
  • Every webhook Shopify sends us is cryptographically verified (HMAC) before we act on it.
  • Our database and cache are never exposed outside our private network.

No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

Your shop domain, access token, and contact email are retained while you have Pleero installed. Uninstalling triggers Shopify's mandatory shop/redact webhook roughly 48 hours later, at which point we delete your merchant record. An email submitted through our “notify me” form is kept until we reach out or you ask us to remove it.

We do not currently state a fixed retention period for future data classes (scoring decisions, verification evidence, Abuse Network contributions) because none of that exists yet. Per our own engineering principles, we implement a retention job before we publish a retention period for it — never the reverse.

7. Your Rights

You can ask us what data we hold about you, request its correction, or request its deletion, by emailing privacy@pleero.app. We will respond within 30 days. Depending on where you live, you may have additional rights under laws such as the GDPR, UK GDPR, or CCPA — we intend to honor them, and we will publish a jurisdiction-by- jurisdiction breakdown once we have taken the legal advice necessary to state it accurately rather than guess.

8. Changes to This Policy

We will update this page as Pleero's actual capabilities change, and update the date above when we do. This document is product context, not a substitute for professional legal advice, and nothing here should be read as a permanent legal commitment beyond what the current version states.

9. Contact

Email privacy@pleero.app with any question about this policy or your data.

Questions about this document?

privacy@pleero.app
Privacy PolicyTerms of ServiceHome

© 2026 Pleero. All rights reserved.