How Remlino handles data

What Remlino does

Remlino helps a Shopify merchant follow up on wholly unpaid orders that use selected manual bank-transfer methods. It does not process a payment, inspect a bank account or mark a Shopify order paid.

Data received from Shopify

Remlino processes the shop domain, shop name and timezone; order identifiers and numbers; customer email and Shopify customer identifier; order amount and currency; creation and observation times; payment, cancellation, test-order and payment-term status; and manual payment method names.

Data supplied through Remlino

Merchants provide reminder schedules, reply-to addresses and payment instructions. Remlino records reminder attempts and delivery events. A customer can report that they have paid; this pauses reminders but does not confirm the transfer.

Why the data is used

The data is used to identify eligible orders, create and deliver reminders, show their status to the merchant, pause follow-up after a customer response, stop follow-up after Shopify reports payment, prevent repeated delivery after a bounce or complaint, provide support and meet privacy obligations.

Service providers and transfers

Shopify supplies store and order data. Render hosts the application and database in Frankfurt, Germany. Resend processes reminder messages and delivery events. These providers may process data outside the merchant’s or customer’s country under their own data-protection commitments. Remlino does not sell personal information or use it for targeted advertising.

Retention

While the app is installed, tracked orders that have not been updated for 90 days are deleted with their reminder records and private links. Stored customer-data request exports and unmatched email-provider events are deleted after 30 days. Security access logs contain no customer names, email addresses, order numbers, tokens or message content and are deleted after 180 days. On uninstall, active sessions and private payment links are revoked; remaining live store data is deleted when Shopify sends its shop-redaction request or after 30 days, whichever occurs first. Customer-redaction requests remove matching live order records. Restricted recovery backups can retain deleted data for up to 30 days before replacement or deletion and are not used for ordinary processing.

Security

Remlino uses HTTPS, Shopify session authentication, private random customer links, access controls and restricted service credentials. No internet service can promise absolute security.

Cookies and the public demo

Remlino does not use advertising trackers on its customer pages. Shopify and the hosting provider can process ordinary technical request data needed to deliver and protect the service. The public demo uses invented data and saves demo choices in the visitor’s browser for up to 24 hours.

Access, correction and deletion

Merchants and customers can request access to, correction of or deletion of applicable personal data. Customers can also contact the Shopify merchant that placed the order. Remlino responds through Shopify’s mandatory privacy request process and its privacy contact.

Contact

Email privacy questions and requests to privacy@remlino.com. Include the Shopify store domain and relevant order number, but do not send passwords, banking credentials or card details.

Changes

This policy can be updated when the service or legal requirements change. Material changes will appear here with a revised effective date.