Privacy policy
Last updated: 2026-11-06
Unstoppable: Chargeback & Risk is a Shopify app that reads a merchant’s store to show how much of its sales is exposed to disputes and payment holds, checks the store’s public pages against the rules of payment processors, Meta and Google, and helps the merchant answer chargebacks before their deadline.
What we access, and why
- Orders (read, last 60 days) — to compute the amount of sales passing through each payment gateway, the share that came from Meta, and the delivery tracking that goes into a dispute response.
- Customers (read) — to look at a buyer’s earlier orders when a dispute is open, which card networks accept as evidence. This is protected customer data, and we use it only for that.
- Products, store pages and legal policies (read) — to read the content a processor or an ad platform would read: product pages, refund, shipping and privacy policies, contact page.
- Shopify Payments disputes, account and payouts (read) — to list disputes with their reason, amount and deadline, and to notice a failed or missing payout.
- Public pages of the store — when the merchant asks for a check, we open the store’s storefront like a visitor would. If the store is password-protected, the merchant can give us the password; we store it encrypted and use it only for that.
We do not currently request permission to send dispute evidence to Shopify. If we do, it will be added here first, and the merchant will be asked to approve the new permission.
We do not modify the merchant’s products, theme or settings. Fixes are written for the merchant, who applies them.
What we store
We store the shop owner contact email supplied by Shopify and the language of the merchant’s Shopify admin. We use them for essential service communication (for example a dispute deadline) and to serve the app in the right language. The contact email is not a marketing opt-in; we do not send marketing messages without separate, explicit consent.
We also store the shop’s name and currency, figures computed from the store (sales volume by gateway, dispute rate, amount exposed) with the date they were read, the results of each check, and, for each dispute, its Shopify identifier, reason, amount, deadline, status and the response prepared. Buyer names and addresses are not stored in our tables; they are read from Shopify when a response is prepared.
We keep a log of product events (installation, first check, uninstall and similar) with no personal data of buyers.
Who else sees this data
These providers process data on our behalf:
- Vercel runs the app, and Neon stores its database.
- Crisp (Crisp IM SAS, Nantes, France) provides the support chat inside the merchant admin. It is loaded only in the Shopify admin, never on a storefront, and sees only what a merchant chooses to write to us.
- OpenRouter (United States) routes our requests to AI models (DeepSeek and GLM) hosted by DeepInfra, Fireworks and Together. They receive the text of the store’s public pages when a check runs and, when a dispute response is drafted, the order details that response needs (items, delivery tracking, policies and, if it matters to the dispute, the buyer’s name and address). We ask these providers not to keep prompts and not to train on them.
What we never do
- We do not sell or share merchant or buyer data.
- We do not use any data for advertising or profiling.
How long we keep it, and deletion
When a merchant uninstalls the app, we immediately clear the contact email and admin language and delete the Shopify session. Shopify sends us a shop redaction request 48 hours later, and we then delete every record we hold for that shop. Customer data requests and redactions from Shopify are answered; because we hold no buyer identity in our own tables, there is nothing further to export or erase there. Merchants can also ask us to delete their data at any time.
How it is protected
Data is encrypted in transit (HTTPS/TLS everywhere, including between the app and its database) and at rest by our database provider.
Our agreement with merchants
We act as a data processor on behalf of the merchant, who remains the controller of their store’s data. We process only the data listed above, only for the purposes listed above. If that ever changes, this page changes first.
Contact
Unstoppable: Chargeback & Risk is built by Abakira. See also the terms of service.