Skip to content

Data, privacy & security

Where your store’s data lives, how Eturns keeps each store apart, what every decision records, and where the legal details are.

Last reviewed

On this page

Where data lives

  • Stored data sits in a Supabase database in Mumbai, India (AWS ap-south-1).
  • The app and its background work run on Render in Singapore.
  • Error reports (Sentry) and product analytics (PostHog) are processed in the United States.

How data moves between these places, and the safeguards for each transfer, are in our privacy policy. Every company that processes data for Eturns is listed on Subprocessors.

How shops are kept apart

  • Every table that holds store data is locked to its own store at the database level. Checks in the app are a second line, not the first.
  • Language models never see a customer’s email, name or address. Cases reach them as ids and structured facts.
  • Every message from Shopify is checked for Shopify’s signature before anything else happens, and handled once even when Shopify sends it twice.
  • Staff appear in Eturns as anonymous ids, never by name or email.

Eturns does not have a completed SOC 2 report. The controls above are what ships today — see Security.

Every decision is recorded

Every decision Eturns makes, or prepares for you, is recorded: the model used, a fingerprint of the instructions it was given, a summary of the context it saw, each step it took, the action, the amount of money involved and its reasoning. You see the reasoning on each case as “Why Eturns chose this”.

More on the decision trail: Security → Audit trail.

Retention, uninstall and erasure

How long each kind of data is kept, what happens when you uninstall, and how erasure requests work are set out in our privacy policy: see Retention and Your rights.

Still stuck? Email contact@eturns.app.