RTOGuardThis page is the data processing agreement between you (the merchant) and Impact Marvel (RTOGuard). It applies to personal data of your buyers that RTOGuard processes for you, and forms part of our Terms of Service.
Roles
For your buyers' personal data you are the data fiduciary (controller) and RTOGuard is your data processor. Under the Digital Personal Data Protection Act, 2023 (DPDP Act) and similar laws such as the GDPR, RTOGuard processes this data only on your behalf and on your instructions, which are our Terms and the settings you choose in the app.
What data and why
RTOGuard reads from Shopify, for Cash on Delivery orders: the buyer's name, phone, email, delivery address and pin code, order items and value, and the delivery outcome. It also reads the order's landing and referring page, UTM tags and Meta click ID to show results per ad.
It uses them only to score RTO risk, tag orders, show your Call list, track deliveries and show reports to you. RTOGuard does not sell this data, does not use it for advertising and does not share it with other merchants.
Sub-processors
- Shopify: your store platform.
- Vercel: app hosting, India region.
- Supabase: database, AWS Mumbai.
- Resend: sends the weekly report email. Your store's own numbers only, no buyer details.
- Shiprocket: only if you connect it.
- When WhatsApp features are live and you turn them on: WhaLoop (operated by Impact Marvel) and Meta's WhatsApp Cloud API; and your own Razorpay account if you enable "Pay online and save".
We will update this list here before adding a new sub-processor.
Security
Data is encrypted in transit (TLS). Shopify access tokens and courier passwords are encrypted (AES-256-GCM). Buyer phone numbers are kept as a one-way hash for matching; the number itself is kept only while a call to that buyer is open, and, when the WhatsApp check is on, to send the confirmation and match the buyer's reply; it is cleared once the buyer confirms or cancels, or the order is cancelled. Access to production systems is limited to the owner, and every view of a buyer's phone or address in the app is logged. See Security.
Retention
While RTOGuard is installed, order data is kept so your scores, Call list and reports work. The store-specific scoring model is trained only on your store's data and never shared across stores.
Buyer requests and Shopify GDPR webhooks
- Access (Shopify's
customers/data_request): RTOGuard records the request and we email you the buyer's data that RTOGuard holds within 30 days. - Deletion (Shopify's
customers/redact): automatic. The buyer's email, phone, call notes, click IDs and landing and referring pages are removed from their orders, their address checks are deleted, and their hashed buyer profile is deleted. Handled within 48 hours. - Store deletion (Shopify's
shop/redact): Shopify sends it 48 hours after you uninstall. RTOGuard then permanently deletes all of your store's data, including your buyers' personal data.
You can also email impactmarvelagency@gmail.com for access, correction or deletion. We respond within 30 days.
Confidentiality
Everyone at Impact Marvel who can access this data is bound to keep it confidential.
Breaches
If a breach affects your buyers' data, we tell you by email without undue delay and within 72 hours of becoming aware of it, with what we know, so you can meet your own duties.
Optional network
The RTOGuard network is optional, off unless you join, and not active yet. If you join, only a keyed one-way hash of the buyer's phone is used and other stores see only a low, medium or high band. Your store remains the data fiduciary. See Terms, section 11.
Contact
impactmarvelagency@gmail.com
Impact Marvel, Bhopal, Madhya Pradesh, India.