RTOGuard
Install

Privacy Policy

Last updated: 24 October 2026 · Operated by Impact Marvel, Bhopal, India

This policy explains what data the RTOGuard Shopify app collects, why, who it is shared with and how long it is kept. RTOGuard is operated by Impact Marvel, Bhopal, India.

What data we collect

RTOGuard collects the following data to provide RTO risk scoring:

  • Order data: order ID, value, shipping address, pin code, city, payment method.
  • Products, discounts and returns: the products on each order and any discount code used, and for returns you accept in Shopify, the products returned, Shopify's return reason and the refund value (to show where returns come from). No buyer details are kept with these.
  • Customer data: Shopify customer ID, order history count, account age, and the buyer's email address on the order (used to check the email domain).
  • Phone numbers: for risk matching, stored only as one-way cryptographic hashes (PBKDF2-SHA512, 100,000 iterations). When the WhatsApp check is on, the buyer's number is also kept to send the message and match the reply, and is cleared once the buyer confirms or cancels, or the order is cancelled.
  • Ad and delivery data: the order's landing and referring page, UTM tags and Meta click ID (to show results per ad), the courier delivery status, and any monthly ad spend you type in.
  • Store data: shop domain, access token (AES-256-GCM encrypted), plan, settings.

How we use your data

  • Score COD orders for RTO risk (0 to 100).
  • Send a WhatsApp order-confirmation message to the buyer of a Cash on Delivery order, from the merchant's own WhatsApp Business number (coming soon; only when WhatsApp is live and you turn it on).
  • Generate weekly analytics insights for your store.
  • Show sales kept after cancellations and returns, ROAS and returns per ad. If you connect Meta ads, RTOGuard reads ad spend only (read-only); it never changes your ad accounts.
  • Train a store-specific machine learning model to improve scoring accuracy.

Data sharing

We do not sell or share your data with third parties, except:

  • WhaLoop (operated by Impact Marvel) and Meta WhatsApp Cloud API: the buyer's phone number, first name, order number and amount, used only to send the order-confirmation message from the merchant's own WhatsApp number.
  • Resend: delivers the weekly report email to the address you choose (your store's own numbers, no buyer details).
  • Razorpay (merchant's own account): order amount and reference, only when the merchant enables "Pay online and save".
  • Shiprocket (only if you connect it): shipment and tracking details, used to record delivery and return outcomes.
  • Vercel: hosting provider, processes requests to serve the app.
  • Supabase: database provider storing encrypted order and store data.
  • RTOGuard network (optional, not active yet; only for stores that accept its terms): other participating stores see a low, medium or high delivery-history band for a buyer, worked out from a keyed hash of the phone number and delivered and returned counts. No names, phone numbers, addresses or order details are shared, the band never changes a score or action on its own, and a store that leaves has its hashes deleted. See the network terms.

Data retention

While RTOGuard is installed, order data is kept so your scores, Call list and reports work. When you uninstall, RTOGuard stops processing at once; Shopify sends a deletion request 48 hours later, and all of your store's data, including buyers' personal data, is then permanently deleted. A buyer's data is deleted earlier when Shopify sends a customers/redact request for them.

Machine learning

RTOGuard trains machine learning models to improve risk scoring accuracy. These models are trained exclusively on your store's own order data and are never shared across stores. To turn ML scoring off for your store, email us and we will switch your store to rule-based scoring.

GDPR rights

EU and UK merchants can request data access, correction or deletion by emailing impactmarvelagency@gmail.com. We respond within 30 days.

  • Customer data requests: received via the Shopify GDPR customers/data_request webhook and recorded; we email the merchant the buyer's data RTOGuard holds within 30 days.
  • Customer redaction: handled via the Shopify GDPR customers/redact webhook within 48 hours.
  • Shop redaction: handled via the Shopify GDPR shop/redact webhook within 48 hours.

Indian merchants and buyers: see also our data processing page, which covers the Digital Personal Data Protection Act, 2023.

Security

  • Shopify access tokens: AES-256-GCM encrypted at rest.
  • Phone numbers used for risk matching: PBKDF2-SHA512 hashed (one-way).
  • All Shopify webhooks: HMAC-SHA256 signature verification.
  • All data transmitted over HTTPS/TLS.
  • Database: Supabase PostgreSQL with TLS encryption in transit, hosted in AWS Mumbai (ap-south-1).

More detail on our security page.

This website

This website (rtoguard.com) sets no cookies and runs no analytics or advertising trackers. See the cookie policy.

Contact

Questions? Email us at impactmarvelagency@gmail.com.
Impact Marvel, Bhopal, Madhya Pradesh, India.