Your data. Your workspace.
Commerce Recovery is operated by ComRec LLC, United States. This notice covers commercerecovery.com and its merchant accounts. Contact us at hello@commercerecovery.com for privacy questions or requests.
Google sign-in
With your permission, Google provides your account identifier, email address, name, and profile picture. We use these to create and authenticate your merchant account and identify your workspace. Supabase stores the account information and manages your sign-in session. We request basic identity permissions only; we do not request access to your Gmail messages, Drive files, contacts, or payment accounts.
Google identity data is not sold, used for advertising, or used to train AI models. Our use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its applicable Limited Use requirements.
Information you add
If you import cases, we store the provider, dispute and transaction references, order reference, amount, currency, delivery date, case status, and notes you supply. Imports remain unverified and do not trigger customer contact. Add only information you are authorized to process. Do not include card numbers, bank credentials, sensitive personal information, or unnecessary customer details in references or notes.
Why we process information
We use account and case information to provide your workspace, keep records separate between merchants, respond to support requests, investigate abuse, and maintain security. We record case imports and note updates in an audit log. Where applicable data protection law requires a legal basis, account administration relies on providing the service you request; security and support rely on our legitimate interests, subject to your rights.
Service providers and sharing
Google provides sign-in, Supabase provides authentication and database hosting, and Vercel hosts the website. They process information needed to perform those services. Authorized support personnel may access information when needed to resolve your request, protect the service, or comply with legal obligations. We do not sell personal information or share it for cross-context behavioral advertising.
The primary workspace database is in London, United Kingdom. Hosting, authentication, support, and technical logs may involve processing in other countries, including the United States. These providers maintain their own privacy and security information: Google, Supabase, and Vercel.
Cookies and technical information
Essential session cookies keep you signed in and secure the sign-in flow. Hosting and authentication services may process IP addresses, browser information, timestamps, and security logs. This release has no advertising pixels or optional analytics. Blocking essential cookies can prevent sign-in.
Retention and deletion
We retain your account and imported records while your workspace is active. To request an export, correction, case deletion, or account closure, contact hello@commercerecovery.com from your account email. We verify the request before acting. Deleting an account removes its active workspace records; restricted logs or provider backup copies may remain for security, legal requirements, and the provider’s normal retention cycle. We do not have a fixed automatic inactivity-deletion schedule in this early release.
Your choices and rights
You can sign out at any time and revoke the Google connection through your Google Account. Revoking Google access does not by itself delete records already stored in your workspace. Depending on your location, you may have rights to access, correct, delete, restrict, object to processing, or receive a copy of your data. Send requests to hello@commercerecovery.com. Where applicable, you may also raise a concern with your local data protection authority.
Business use and changes
This service is for adult business users, not children. If we change the information requested from Google or its purpose, we will update this notice and obtain any additional consent required before using it in the new way.
The Shopify app
The existing Shopify app has a separate privacy policy. A website account does not provide access to that app’s merchant or customer records.