Privacy
SwapBack processes the order, product and return data needed for merchant return operations.
Data and protection
Customer email is hashed for lookup; retained customer names and notes are encrypted. Manual PDFs are private objects delivered through signed, short-lived links. Store-scoped authorization protects merchant records and verified portal sessions.
Customer data requests
Shopify customer data requests appear in Privacy Requests. Scoped archives include retained return records, related activity, uploaded PDF files and matching portal-session data. The merchant must verify identity and share the archive securely within the displayed 30-day deadline. Ready does not mean it was delivered. Downloads expire 30 days after preparation; customer redaction revokes access.
Use and responsibilities
SwapBack does not sell customer data and does not use it for ads. It does not make legally significant automated decisions. Merchants control their return policy and final decisions. Contact support for data questions.