Revundo Privacy Policy
Provider: Steele Standards LLC, DBA Revundo (formerly Verifund) ("Revundo," "we," "us")
Contact: hello@revundo.com · (317) 762-8410 · 6235 Birkdale Drive, Evansville, IN 47715
Last updated: November 5, 2026
1. What We Collect
- Merchant account data: name, email, store domain, plan, and billing details. Payments are processed by Stripe; we do not store card numbers.
- Shopper return data: order numbers, item and reason selections, uploaded photos, and the contact details needed to resolve a return. Shopper identifiers are hashed before they leave the merchant's store.
- Site analytics: anonymized page views on revundo.com.
2. How We Use It
We use this information to operate the returns portal, route returns (Keep & Credit, Size-Swap, ship-back), analyze uploaded return photos with AI to assess item condition (damage, wear, wrong item, abuse signals), detect abuse through the Trust Network, and bill for the service.
Cross-merchant Trust Network signals use de-identified data only, never raw shopper identities. The Trust Network is not enabled for a merchant until a Data Processing Addendum (DPA) is signed.
3. AI Processing of Uploaded Photos
We use automated tools, including third-party AI service providers, to analyze return photos and assess item condition. Our AI providers process photos only on our behalf and under written agreements that prohibit them from using the data for their own purposes. We do not use shopper photos or return data to train generalized AI models.
Automated assessments support, but do not replace, the merchant's decision, and merchants may review or override them. Shoppers may ask the merchant for human review of a return decision.
4. What We Don't Do
- We do not sell personal data.
- We do not use shopper data for advertising.
- We do not share raw shopper identities across merchants.
We do not sell or share personal data for cross-context behavioral advertising, and we have not done so in the past 12 months. We do not knowingly sell the data of anyone under 16.
5. Legal Bases for Processing (EEA and UK)
Where the GDPR or UK GDPR applies, we process personal data on these bases:
- Contract: to provide the returns portal and billing.
- Legitimate interests: to prevent fraud and abuse, secure the service, and improve it, balanced against your rights.
- Legal obligation: for tax, accounting, and other legal compliance.
- Consent: where required, which you may withdraw at any time.
For shopper return data, Revundo acts as a processor or service provider for the merchant, who is the controller or business. For merchant account data, Revundo is the controller.
6. Retention and Deletion
Return records are retained while your account is active and for 90 days after termination, then deleted, unless law requires longer retention. You may request earlier deletion by email.
Uploaded return photos are kept for 90 days after the return is resolved, then deleted or irreversibly de-identified. Backups are overwritten on a routine cycle, generally within 30 days. We may keep data longer where needed to comply with law, resolve disputes, prevent fraud, or enforce our agreements.
7. Subprocessors and Service Providers
We use the following providers to deliver the service:
| Provider | Purpose |
|---|---|
| Stripe | Payment processing |
| Vercel | Hosting |
| Supabase | Database and storage |
| OpenAI | Photo analysis |
| IONOS |
We require each provider to protect data under written agreements. A current list is available on request. Merchants will be notified of material changes as set out in the DPA.
8. International Transfers
Data may be processed in the United States and other countries where our providers operate. Where required, we use safeguards such as Standard Contractual Clauses.
9. Security
We use TLS in transit, encrypted storage through our hosting providers (Vercel, Supabase), hashed shopper identifiers, and least-privilege access. See our Security page for current practices.
If a breach affects personal data, we will notify affected merchants without undue delay and in any event within 72 hours of confirming it, with the details they need to meet their own legal duties. We will notify regulators and individuals where the law requires.
Security disclaimer. Although we work hard to secure your information, no method of transmission or storage is completely secure, and breaches can occur despite our best efforts. We cannot guarantee absolute privacy or safety of your information.
10. Your Privacy Rights
Depending on where you live (including California, Colorado, Connecticut, Virginia, Texas, and other U.S. states, and the EEA and UK), you may have the right to:
- Know and access the personal data we hold about you
- Correct inaccurate data
- Delete your data
- Receive a portable copy of your data
- Opt out of the sale or sharing of personal data or of targeted advertising (we do neither)
- Limit the use of sensitive personal data (we do not use it beyond providing the service)
- Object to or restrict certain processing, and withdraw consent
- Not be discriminated against for exercising these rights
- Appeal a denied request, where your state provides for it
- Lodge a complaint with your data protection authority
How to exercise them. Shoppers should contact the merchant they bought from; we act on verified merchant-forwarded requests. Merchants and others may email hello@revundo.com. We may need to verify your identity. We will respond within 30 days (45 days under some U.S. state laws, and one month under the GDPR), and we will tell you if we need more time where the law permits an extension. Authorized agents may submit requests with proof of authority.
11. Cookies and Analytics
revundo.com uses only anonymized analytics and essential cookies. We do not use advertising cookies. We honor Global Privacy Control signals where required.
12. Children's Privacy
Our service is not directed to children under 16, and we do not knowingly collect their data. If you believe we have, contact us and we will delete it.
13. Disclaimer and Limitation of Liability
The service and this policy are provided "as is" and "as available." To the fullest extent permitted by law, Revundo disclaims all warranties, express or implied, including any warranty that the service will be uninterrupted, error-free, or free from unauthorized access, loss, or disclosure of data. Your use of the service is at your own risk.
To the fullest extent permitted by law, Revundo, its owners, officers, employees, and affiliates will not be liable for any indirect, incidental, special, consequential, exemplary, or punitive damages, or for any loss of profits, revenue, data, or goodwill, arising out of or related to this policy or the service, even if advised of the possibility of such damages. Our total liability for any claim arising out of or related to this policy or the service will not exceed the amount you paid us in the 12 months before the event giving rise to the claim.
Some jurisdictions do not allow certain exclusions or limitations, so parts of this section may not apply to you. Nothing in this policy limits liability that cannot be limited under applicable law, or any rights you have under data protection laws. Merchants' liability terms are further governed by the Terms of Service and DPA.
14. Changes to This Policy
We may update this policy from time to time. We will post the new version with an updated date and, for material changes, notify merchants by email. Continued use after the effective date means you accept the changes.
15. Contact
Steele Standards LLC, DBA Revundo · hello@revundo.com · (317) 762-8410 · 6235 Birkdale Drive, Evansville, IN 47715