RISKWISE · BY SELLERWISE

Privacy Policy

Effective date: September 30, 2026

RiskWise — Order Risk & COD Protection by Sellerwise — is operated by Sellerwise. This policy explains how information is processed to provide order risk assistance to Shopify merchants. Merchants control their stores and remain responsible for their own customer notices and lawful use of customer information.

What RiskWise does

RiskWise analyzes store orders for supported risk signals, generates risk classifications and explanations, synchronizes risk tags, supports merchant-defined rules, and provides store-specific customer block and unblock tools.

Information we process

We use only information needed for the app’s functionality, security and operation, where available and authorized by Shopify and the merchant:

• Shopify shop identifiers and domains; installation, authentication and session information; subscription plans and order-scan usage entitlements; and merchant settings and risk rules.
• Order identifiers, dates and times, values and currencies, product and variant identifiers, line-item information and quantities, and payment classifications such as COD, prepaid or unknown.
• Shopify customer identifiers and, where authorized and required, customer names, email addresses, phone numbers and shipping information, including postal codes.
• IP addresses where Shopify provides them and they are needed for supported matching signals. The current order-processing implementation normalizes and tokenizes IP addresses for matching rather than storing raw IP addresses in order evidence.

Protected matching identifiers may be normalized and converted into store-specific keyed tokens. Selected customer and shipping evidence is encrypted. Tokenization and encryption protect identifiers; they do not mean all retained information is anonymous. Raw webhook payloads are not retained as order records.

How information is used

• Analyze supported and merchant-configured signals; produce Safe, Medium Risk and High Risk assessments; and explain the reasons.
• Synchronize Sellerwise/RiskWise risk tags, maintain store-specific blocked-customer matching, and provide order history and risk dashboards.
• Enforce subscription and order-scan entitlements, prevent duplicate usage counting, and maintain app security, integrity, troubleshooting and legal compliance.

RiskWise does not use one merchant’s customer data to create a shared cross-merchant customer blacklist or reputation network. RiskWise does not automatically cancel, refund, hold or fulfill orders based solely on its risk classification. Merchants make their own fulfillment decisions. A Safe classification is not a guarantee that an order is free from fraud or other risk.

Sharing and service providers

Information may be processed by infrastructure and service providers needed to operate the app, subject to applicable contractual, access and security safeguards. Information may also be disclosed where legally required or necessary to protect the service and its users. We do not sell personal data for advertising purposes or use customer information for advertising in the current implementation.

Shopify provides the source data and platform services and handles app billing where applicable. Shopify’s processing is subject to Shopify’s own privacy practices. RiskWise does not collect payment-card details for app subscriptions.

Retention and deletion

Information is retained only as long as reasonably necessary to provide the service, meet legitimate operational or security obligations, or comply with law, subject to applicable Shopify privacy and redaction requests. RiskWise applies a 180-day maximum retention period to retained order snapshots, identity evidence, risk assessments and related order history, unless earlier deletion is required. Processed webhook receipts are retained for no more than 90 days. Active merchant blocklist entries remain until the merchant removes them; removed entries are retained for no more than 180 days. Closed privacy request operational records are retained for no more than 180 days.

Uninstalling disables app processing and revokes stored sessions; it does not immediately delete all retained history. Shopify shop-redaction processing removes the app’s shop-scoped records. Customer redaction removes matching retained customer/order records and block entries. Minimal protected erasure markers can remain to prevent erased records from being recreated by later deliveries. Order identifiers are removed from retained scan-usage entries during customer/order erasure; these entries preserve usage accounting without retaining a customer identifier.

Your privacy requests

Customers should contact the merchant whose store they used. Merchants and customers may use applicable merchant and Shopify privacy processes and contact Sellerwise to request access, correction, deletion or other rights available under applicable law. Requests may require identity and authority verification.

RiskWise authenticates Shopify customer data requests and keeps encrypted request selectors while fulfillment is pending. Authorized operators can generate a store-specific customer export and deliver it securely to the verified store owner. Generation and delivery are recorded separately; receipt alone does not mean fulfillment. Customer and shop redaction delete matching retained records and invalidate pending exports.

Security

Safeguards include store-level tenant isolation, access controls, authenticated Shopify requests and webhooks, data minimization, store-specific matching tokens and encryption of selected sensitive evidence. No system can guarantee absolute security.

International processing

Information may be processed in countries where Sellerwise’s necessary service providers operate, subject to applicable data-transfer requirements and safeguards.

Children

RiskWise is a merchant/business application and is not intended for use by children.

Policy updates

We may update this policy as the service or legal requirements change. We will revise the effective date and provide additional notice where required.

Contact Sellerwise

Privacy contact: support@sellerwise.in