Privacy Policy

Last updated: April 3, 2026

1. Introduction

Reclaimo ("we", "us") is committed to protecting your privacy. This policy explains how we collect, use, and protect your personal data in compliance with the General Data Protection Regulation (GDPR) and other applicable laws.

2. Data Controller

Reclaimo is the data controller for personal data processed through the Service. Contact: support@reclaimo.eu.

3. Data We Collect

Shop owners (account holders): Name, email address, password (hashed), shop name, shop URL, API credentials (encrypted).

End customers (complaint submitters): Name, email address, phone number (optional), order number, complaint description.

Automatically collected: We do not use cookies for tracking. We do not use analytics tools that track individual users.

4. How We Use Your Data

We process personal data for the following purposes:

  • Providing the complaint management service
  • Sending email notifications about complaint status changes
  • Processing payments through Stripe
  • Communicating service updates

Legal basis: Performance of a contract (Art. 6(1)(b) GDPR) and legitimate interest (Art. 6(1)(f) GDPR).

5. Data Sharing

We share data only with:

  • Stripe — for payment processing
  • Resend — for sending email notifications
  • Vercel — hosting provider (EU/US)
  • Neon — database provider (EU)

We do not sell personal data to third parties.

6. Data Retention

Account data is retained for the duration of your account. Complaint data is retained for 24 months after resolution, unless you request earlier deletion. You may delete your account and all associated data at any time.

7. Your Rights (GDPR)

You have the right to:

  • Access — request a copy of your personal data
  • Rectification — correct inaccurate data
  • Erasure — request deletion of your data
  • Portability — receive your data in a structured format
  • Objection — object to processing based on legitimate interest
  • Restriction — request restriction of processing

To exercise these rights, contact support@reclaimo.eu. We will respond within 30 days.

8. Data Security

We implement appropriate technical and organizational measures to protect your data, including: encrypted connections (HTTPS), hashed passwords, and access controls. API credentials are stored securely and never exposed to end users.

9. International Transfers

Data may be processed in the EU and US. Where data is transferred outside the EU, we ensure appropriate safeguards are in place (Standard Contractual Clauses).

10. Changes to This Policy

We may update this policy from time to time. We will notify registered users of significant changes via email.

11. Contact

For privacy-related inquiries: support@reclaimo.eu.

You have the right to lodge a complaint with a supervisory authority if you believe your data is being processed unlawfully.