Privacy Policy

1. Who we are

RTV Bridge is operated by Maru Labs. In this policy, “we,” “us,” and “our” refer to Maru Labs, and “the app” refers to RTV Bridge.

2. Information the app processes

The app processes only the information needed to provide its service:

• Shopify shop and session information needed to authenticate the merchant and keep the app securely connected.
• Product, inventory, and location information requested from Shopify when a merchant searches for return items.
• Supplier records, return-to-vendor records, and CSV template settings created by the merchant.
• Basic technical logs needed to operate, secure, and troubleshoot the service.

RTV Bridge does not request customer or order data. Generated CSV files are created on demand and are not stored after the response is delivered.

3. How we use information

• Authenticate the merchant and provide the app.
• Search Shopify inventory for return items.
• Save suppliers, return records, and export templates.
• Generate downloadable CSV files at the merchant’s request.
• Protect the service and diagnose technical problems.
• Comply with legal and Shopify platform requirements.

4. Service providers and disclosures

We use Shopify to provide store data and authentication, Vercel to host the app, and Neon to host the app database. These providers process information only as needed to provide their services to us. We do not sell merchant or customer information, and we do not use it for advertising.

We may disclose information if required by law, to protect the security or rights of merchants and the service, or as part of a business transfer subject to appropriate confidentiality obligations.

5. Retention and deletion

Supplier, return, template, and Shopify session records are retained while the app is installed. When RTV Bridge is uninstalled, the app deletes the shop’s saved app data and session records. Shopify’s mandatory privacy webhooks are also handled to ensure deletion requests are completed. Limited security logs may be retained for a reasonable period where necessary to prevent abuse, resolve incidents, or meet legal duties.

6. Security and international processing

We use reasonable administrative and technical safeguards designed to protect information, including Shopify-authenticated access and secure HTTPS connections. Our providers may process information in countries other than the merchant’s country, subject to their data protection commitments.

7. Merchant choices and rights

Merchants can edit app records and can stop all further processing by uninstalling RTV Bridge. Depending on local law, a merchant may also request access, correction, deletion, or other rights relating to their personal information.

8. Changes to this policy

We may update this policy when the app or legal requirements change. We will post the updated version here and revise the effective date.

9. Contact

For privacy questions or requests, email Maru Labs at merotic01@gmail.com.