Privacy Policy

Introduction

DisputeKit is a software service designed to help merchants manage payment disputes, chargebacks and related evidence. This Privacy Policy explains what information we collect, how we use it and the rights available to users of the service.

Information We Collect

We may collect and process the following categories of information:

• Name and email address.
• Authentication and account identifiers.
• Shopify store information and merchant account details.
• Stripe account identifiers and subscription information.
• Order, fulfilment, customer and dispute-related information imported from connected platforms.
• Technical information including IP address, browser type, device information and application logs.

How We Use Information

• Provide and operate the DisputeKit service.
• Connect and synchronise with Shopify and Stripe.
• Generate, organise and present dispute-related information and evidence.
• Manage subscriptions, billing and customer support.
• Monitor service performance and security.
• Prevent fraud, abuse and unauthorised access.
• Comply with legal and regulatory obligations.

Legal Basis for Processing

Where applicable, personal information is processed on the basis of contractual necessity, legitimate interests, legal obligations and, where required, user consent.

Third-Party Providers

We use third-party service providers to operate and support the platform. These providers may process information on our behalf.

• Shopify
• Stripe
• Supabase
• Railway
• Vercel
• Cloudflare

These providers maintain their own privacy and security practices.

Data Retention

We retain information for as long as necessary to provide the service, comply with legal obligations, resolve disputes, maintain security and enforce agreements. Information may be deleted or anonymised after account closure where appropriate.

International Data Transfers

Information may be processed or stored in countries outside your country of residence through the infrastructure and service providers used to operate DisputeKit.

Security

We take reasonable technical and organisational measures to protect information against unauthorised access, disclosure, alteration, loss or destruction. However, no system can guarantee absolute security.

Your Rights

Depending on applicable law, you may have rights relating to:

• Access to your personal information.
• Correction of inaccurate information.
• Deletion of personal information.
• Restriction of processing.
• Data portability.
• Objection to certain processing activities.
• Withdrawal of consent where consent is relied upon.

Contact Information

If you have any questions regarding this Privacy Policy or your personal information, please contact:

support@disputekitapp.com

Complaints

If you believe your information has been handled in a manner that does not comply with applicable law, you may have the right to submit a complaint to the relevant data protection authority, including the UK Information Commissioner's Office (ICO).

Changes to this Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the date shown at the top of this page.