Privacy Policy

1. Introduction

Comrade Enterprises LLC operates ReturnShield, a software platform that helps Amazon FBA sellers review their own returns and prepare reimbursement worksheets. ReturnShield reads the official FBA Customer Returns Report (GET_FBA_FULFILLMENT_CUSTOMER_RETURNS_DATA) and organizes return status, dispositions, and license plate numbers (LPNs). ReturnShield stores and processes the official FBA reimbursements report (GET_FBA_REIMBURSEMENTS_DATA) and matches those payment rows to your returns. ReturnShield also stores the official FBA customer shipment sales report (GET_FBA_FULFILLMENT_CUSTOMER_SHIPMENT_SALES_DATA) solely as daily unit totals and ASIN-level unit counts for returns analysis. It prepares a structured claim worksheet (CSV) that you copy or download and submit yourself in Amazon Seller Central. ReturnShield does not automatically file Seller Support cases, auto-submit reimbursement claims, or contact buyers or customers. “Dispute Filed” is a local worksheet marker you update in ReturnShield. It is not sent to Amazon. Amazon reimbursement payments are stored from GET_FBA_REIMBURSEMENTS_DATA and matched to your returns. A “Reimbursed” status you record yourself remains a local worksheet marker. This Privacy Policy explains how we collect, use, disclose, and protect information when you visit our website, create an account, or use the Service.

2. Information We Collect

We may collect the following categories of information:

• Account information: name, email address, authentication credentials, profile preferences, and the age confirmation recorded when you register.
• Amazon seller data: when you connect a seller account, ReturnShield reads the official FBA Customer Returns Report (GET_FBA_FULFILLMENT_CUSTOMER_RETURNS_DATA). From that report we store the order ID, SKU, ASIN, product name, return date, return reason, return status, detailed disposition, quantity, license plate number (LPN), and an amount only when the report row includes one. ReturnShield uses those fields to organize the return and to prepare a structured claim worksheet (CSV) in your browser. You copy or download that worksheet and submit it yourself in Amazon Seller Central. ReturnShield does not automatically file Seller Support cases, auto-submit reimbursement claims, or contact buyers or customers. ReturnShield stores and processes the official FBA reimbursements report (GET_FBA_REIMBURSEMENTS_DATA) and matches payment rows to your returns by license-plate number, order ID, and ASIN. That match is read-only. “Dispute Filed” remains a local worksheet marker. ReturnShield does not submit the case. ReturnShield stores the official FBA customer shipment sales report (GET_FBA_FULFILLMENT_CUSTOMER_SHIPMENT_SALES_DATA) solely as daily unit totals and ASIN-level unit counts for returns analysis. Order IDs and ship-to city, state, and postal code from that report are not stored.
• Buyer data: ReturnShield does not store buyer personally identifiable information (PII), buyer names, buyer email addresses, buyer comments, customer comments from the returns report, or shipping addresses.
• Return evidence: photos or PDFs you choose to upload on an order page. Accepted files are JPEG, PNG, WebP, GIF, and PDF, up to 5 MB each. They are stored in Firebase Storage for your account and shown only to you on that return.
• Billing information: subscription status and payment-related identifiers processed by our payment provider (Stripe). We do not store full payment card numbers on our servers.
• Usage data: log data, device/browser type, IP address, pages viewed, feature usage, and diagnostic information.
• Communications: messages you send to support and records of service-related notifications.

3. How We Use Information

Comrade Enterprises LLC uses collected information to:

• Provide, maintain, and improve ReturnShield features and analytics.
• Authenticate users and secure accounts.
• Process subscriptions, trials, and billing events.
• Send service notifications, product updates, and support responses.
• Detect fraud, abuse, and technical issues.
• Comply with legal obligations and enforce our Terms of Service.

4. Legal Bases & Consent

Where applicable, we process personal data based on contract performance (providing the Service), legitimate business interests (security, analytics, product improvement), and your consent (such as when connecting third-party accounts or opting into marketing communications).

5. Data Sharing

We do not sell your personal information. We share data with the service providers below, including analytics and email delivery, only as described:

• Google Firebase (Google LLC) hosts the Service, stores account and return records, and runs our backend. When you use ReturnShield, Firebase processes your account profile, the data you save in the Service, and connection data such as your IP address. Authentication sessions are handled by Firebase Authentication.
• Email delivery. Firebase Authentication sends transactional email for email verification and password resets. Those messages contain your email address and a one-time link. A confirmation that your account was deleted is sent through our transactional email service when that service is configured. That message contains your email address and the notice text. If the service is not configured, account deletion still completes and the confirmation is not sent. Marketing email is sent only if you opt in and an email sender is configured. If you have not opted in, or the sender is not configured, no marketing email is sent.
• Analytics. If you choose “Accept all” on the cookie banner or later in Account Settings, we use Google Analytics. Google receives pages viewed, feature events such as sign-in, your IP address, and device and browser data. We do not send Amazon return contents or payment card numbers to analytics. Choosing “Essential only” does not load analytics. An account-deletion analytics event is sent from the server only when Accept all is saved for that browser and Google Analytics is configured. Essential only, a missing choice, or missing analytics configuration skips that event.
• Google Sign-In (Google LLC) is used only if you choose to sign in or re-authenticate with Google. Google then processes the sign-in request, including your IP address and the Google account information you authorize (such as your name and email address), and issues authentication tokens that Firebase uses to create your session. We do not send Amazon seller data or payment card data to Google Sign-In.
• Stripe processes subscriptions and payments. Stripe receives billing identifiers and payment details you submit to Stripe. We do not store full payment card numbers on our servers.
• Tailwind CDN (cdn.tailwindcss.com) delivers the stylesheet script that formats the site in your browser. Your browser’s request to that CDN includes your IP address, browser type, and the page address. We do not send your account data, Amazon data, or authentication tokens to Tailwind.
• jsPDF CDN (cdnjs.cloudflare.com, operated by Cloudflare) loads the jsPDF library with ReturnShield app pages so a privacy export PDF can be generated in your browser. The CDN receives your IP address, browser type, and the script request when an app page loads, including when you do not download a PDF. The PDF is generated on your device. We do not upload the contents of that export to the CDN.
• Amazon: when you connect a seller account, we use the authorized Amazon Fulfillment integration to read the FBA Customer Returns Report (GET_FBA_FULFILLMENT_CUSTOMER_RETURNS_DATA), store and process the FBA reimbursements report (GET_FBA_REIMBURSEMENTS_DATA), and store the FBA customer shipment sales report (GET_FBA_FULFILLMENT_CUSTOMER_SHIPMENT_SALES_DATA) solely as daily unit totals and ASIN-level unit counts for returns analysis. Return import stores order ID, SKU, ASIN, product name, return date, return reason, return status, detailed disposition, quantity, license plate number, and an amount only when the report row includes one. Order IDs and ship-to city, state, and postal code from the shipment sales report are not stored. ReturnShield does not store buyer personally identifiable information (PII), buyer names, buyer email addresses, buyer comments, customer comments from the returns report, or shipping addresses. It does not send Seller Support cases, reimbursement claims, or buyer messages to Amazon. If you disconnect Amazon in Account Settings, ReturnShield requests revocation of the Login with Amazon OAuth token through Amazon’s token revocation API (https://api.amazon.com/auth/o2/token/revoke), then deletes the imported return logs, the saved return reports, and the token stored by ReturnShield. If Amazon does not accept that revocation, those local records are kept so you can try again. If Amazon cannot be reached, or the revocation request times out, those local records are kept as well. If no token is stored, or Login with Amazon credentials are not configured, the remote revocation is skipped and the imported returns and saved reports are still deleted.
• Legal and safety: when required by law, court order, or to protect rights, safety, and integrity of the Service.
• Business transfers: in connection with a merger, acquisition, or asset sale involving Comrade Enterprises LLC, subject to continued protections.

6. Data Security

We implement administrative, technical, and organizational measures designed to protect your data, including encrypted transport (HTTPS) and access controls. Firebase Hosting and Cloud Functions require TLS 1.2 or higher. Amazon refresh tokens are encrypted with AES-256-GCM before they are saved. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

7. Data Retention

Seller operational return fields, such as order ID, SKU, ASIN, product name, quantity, amount, and worksheet status, stay while your account is active. Buyer-identifying fields are not collected from Amazon. Uploaded evidence files, and any buyer-identifying fields that are present on a return, are removed 30 days after the return date, or 30 days after import when the return date is missing. You can delete your account directly in Account Settings. Deletion removes your Firebase Authentication login, the Firestore data stored for the account, and the Amazon token stored by ReturnShield. It also requests deletion of your Stripe customer record. If Stripe is not configured, no Stripe customer is found, or Stripe cannot complete that deletion, the account deletion still finishes and the Stripe outcome is written to the server log. Account deletion asks Amazon to revoke the stored Login with Amazon token when that token and Login with Amazon credentials are present, then removes the token from ReturnShield. If Amazon cannot be reached, the token is still deleted with the account and the revocation result is written to the server log. Some information may be retained where the law or a legitimate retention duty requires it.

8. Your Rights & Choices

Depending on your location, you may have rights to access, correct, delete, or export personal data, and to object to or restrict certain processing. You can download your account data directly as a PDF from Account Settings. The PDF is generated in your browser from the account data stored in ReturnShield. It includes up to 10,000 return records, up to 100 notifications, and up to 50 saved reports. Characters outside basic Latin text are omitted. You can also contact us at support@returnshieldtool.com to exercise these rights.

9. Cookies & Similar Technologies

We use essential cookies and local storage to keep you signed in and remember preferences. Optional analytics cookies are used only if you choose Accept all. You can view and update that choice, Essential only or Accept all, at any time on the Account Settings page. The same choice is offered on the cookie banner. You can also control cookies through your browser settings, though some features may not function properly if essential storage is disabled.

10. Third-Party Links

The Service may link to third-party websites or services (including Amazon and Stripe). Their privacy practices are governed by their own policies, not this Privacy Policy.

11. Children's Privacy

ReturnShield is not intended for individuals under 18. During registration you must check a required box confirming that you are at least 18 years old and that you agree to the Terms of Service and Privacy Policy. That confirmation is stored on your account record. Google sign-in on the login page is available only for an existing ReturnShield account. If that Google account does not already have a ReturnShield account, sign-in stops and you are sent to registration, where the 18+ confirmation is required before the account record is created. We do not knowingly collect personal information from children. If you believe a child has provided us data, contact us to request deletion.

12. International Users

If you access the Service from outside the United States, your information may be processed in the United States and other countries where our providers operate. By using ReturnShield, you consent to such transfers subject to applicable safeguards.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated effective date. Continued use of the Service after changes constitutes acceptance.

14. Contact Us

For privacy-related questions or requests, contact ReturnShield (operated by Comrade Enterprises LLC):
Email: support@returnshieldtool.com

Product: ReturnShield — operated by Comrade Enterprises LLC