Last updated: May 19, 2026
This Privacy Policy explains how Returnalyze, Inc. (“Returnalyze,” “we,” “us,” or “our”) collects, uses, discloses, and protects your personal information when you use our website at returnalyze.com and related services (the “Service”). It also explains your rights and choices with respect to your personal information.
Please read this policy carefully. By using our Service, you acknowledge that you have read and understood this Privacy Policy.
1. Who We Are
Returnalyze, Inc.
25 Corporate Drive, Suite 100, Burlington, MA 01803
Privacy Contact: [email protected]
Role under GDPR: For data we process on behalf of our customers, Returnalyze acts as a Data Processor. For data we collect through our website, marketing activities, and internal operations, Returnalyze acts as a Data Controller
Role under CCPA: Business
2. Information We Collect
2.1 Information You Provide Directly
When you register for an account, use our Service, or contact us, we may collect:
- Name and email address
- Phone number
- Account credentials
- Communications you send us (e.g., support inquiries)
2.2 Information Collected Automatically
When you visit or use our Service, we and our service providers automatically collect:
- Device and browser information (IP address, browser type and version, operating system)
- Usage data (pages visited, time spent, links clicked, referral URLs)
- Unique device identifiers
- Cookie and tracking data (see Section 4)
2.3 Information from Third Parties
We may receive information about you from analytics providers, advertising partners, and other third-party services you connect to our platform, consistent with their privacy policies and your permissions.
2.4 Information We Do Not Collect
Unless you specifically provide it, we do not knowingly collect:
- Sensitive personal information such as Social Security numbers, financial account details, health information, or biometric data
- Precise geolocation
- Protected classification characteristics (race, religion, sexual orientation, etc.)
- Personal information from children under 13
3. How We Use Your Information
We use the personal information we collect for the following purposes:
3.1 Service Delivery and Account Management
- To create and manage your account
- To provide, operate, and improve the Service
- To process transactions and fulfill contractual obligations
- To provide customer support and respond to your inquiries
3.2 Communications
- To send you service-related notifications, security alerts, and administrative messages
- To send you marketing communications about our products and services that are relevant to your previous interactions with us, where permitted by law and always subject to your right to opt out.
3.3 Analytics and Improvement
- To analyze usage trends and measure Service performance
- To test new features and improve user experience
- To conduct internal research and auditing
3.4 Advertising and Personalization
- To deliver interest-based advertising on our Service and third-party platforms
- To measure the effectiveness of our advertising campaigns
3.5 Legal and Security
- To comply with applicable law, legal processes, and government requests
- To detect, prevent, and investigate fraud, abuse, and security incidents
- To protect our rights, property, and the safety of our users and the public
3.6 Business Operations
- To evaluate or carry out a merger, acquisition, reorganization, or sale of assets, subject to appropriate confidentiality protections
4. Cookies and Tracking Technologies
We use cookies, web beacons, pixel tags, and similar technologies to operate and improve our Service. Here is a summary of the categories we use:
4.1 Cookie Categories
Essential Cookies: Required to provide the Service and authenticate users. Cannot be disabled without impacting core functionality.
Preference Cookies: Remember your settings and preferences (e.g., language, login details) to personalize your experience.
Analytics Cookies: Collect aggregated information about how users interact with our Service so we can improve it.
Advertising Cookies: Used to serve you relevant ads on our Service and third-party sites, and to measure ad performance. These may be set by third parties.
4.2 Your Cookie Choices
You can manage or disable non-essential cookies through your browser settings or our cookie preference center (available in the footer of our website). Please note that disabling certain cookies may limit your ability to use some features of our Service.
To opt out of interest-based advertising, you may use the following platforms:
- NAI Opt-Out: http://www.networkadvertising.org/choices/
- DAA Opt-Out: http://optout.aboutads.info/
- EDAA Opt-Out: http://www.youronlinechoices.com/
On mobile devices, you can use the “Limit Ad Tracking” (iOS) or “Opt Out of Ads Personalization” (Android) settings.
4.3 Third-Party Analytics and Advertising Services
Google Analytics: We use Google Analytics to understand how users interact with our Service. Data collected is subject to Google’s Privacy Policy. You may opt out using the Google Analytics Opt-Out Browser Add-on.
Google Ads: We use Google Ads for remarketing. For visitors in regions where consent is required (such as the EEA and UK), we only use advertising cookies and similar technologies with your consent. You can manage your preferences at Google Ads Settings.
Salesforce: We use Salesforce CRM for marketing and CRM. Salesforce privacy policy
5. How We Share Your Information
We do not sell your personal information to data brokers. We may share your information in the following circumstances:
- With Service Providers: We share information with vendors who help us operate the Service (e.g., analytics, cloud hosting, email delivery, advertising). These providers are contractually obligated to use your data only as directed by us and to maintain appropriate security safeguards.
- With Business Partners: We may share information with partners to offer joint products or promotions, with your knowledge.
- With Affiliates: We may share information within our corporate family, who are required to honor this Privacy Policy.
- For Business Transfers: In connection with a merger, acquisition, or asset sale, your information may be transferred. We will provide notice before such a transfer and before your data becomes subject to a different privacy policy.
- For Legal Compliance and Safety: We may disclose information when required by law, legal process, or governmental request, or when we believe disclosure is necessary to protect rights, property, or safety.
- With Your Consent: We may share information for other purposes with your explicit consent.
6. Data Retention
We retain personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. The specific criteria we use include:
- The duration of our relationship with you (e.g., while your account is active)
- Our legal obligations (e.g., tax, accounting, or regulatory requirements)
- Statute of limitations applicable to potential legal claims
- Our legitimate business interests, such as fraud prevention and security
Usage data is generally retained for shorter periods unless needed for security or legal compliance. When data is no longer needed, we securely delete or anonymize it.
7. Data Security
We implement technical and organizational security measures designed to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption in transit and at rest, access controls, and regular security assessments.
However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially reasonable means to protect your data, we cannot guarantee absolute security. In the event of a data breach affecting your rights, we will notify you as required by applicable law.
8. International Data Transfers
Returnalyze is based in the United States. If you access our Service from outside the United States, your information will be transferred to, processed in, and stored in the United States, where data protection laws may differ from those in your country.
Where required by law (such as for transfers from the European Economic Area), we implement appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission, to ensure your data receives adequate protection.
9. Your Privacy Rights
9.1 Rights Under GDPR (EEA, UK, and Switzerland Residents)
If you are located in the European Economic Area, United Kingdom, or Switzerland, you have the following rights under applicable data protection law:
- Right of Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete data.
- Right to Erasure: Request deletion of your personal data where there is no legitimate basis for retention.
- Right to Restrict Processing: Request that we limit how we process your data in certain circumstances.
- Right to Data Portability: Receive your data in a structured, machine-readable format.
- Right to Object: Object to processing based on legitimate interests or for direct marketing.
- Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent, without affecting the lawfulness of prior processing.
- Right to Lodge a Complaint: File a complaint with your local supervisory authority.
9.2 Legal Bases for Processing (GDPR)
We process your personal data based on the following legal grounds:
- Performance of a Contract: Processing necessary to provide the Service you requested.
- Legitimate Interests: Processing for our business interests (e.g., fraud prevention, analytics), where those interests are not overridden by your rights.
- Consent: Where you have given clear consent (e.g., for marketing communications).
- Legal Obligation: Where required by law.
9.3 Rights Under CCPA / CPRA (California Residents)
If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):
- Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you, and the purposes for which it is used and shared.
- Right to Delete: Request deletion of your personal information, subject to certain exceptions.
- Right to Correct: Request correction of inaccurate personal information we hold about you.
- Right to Opt Out of Sale or Sharing: Direct us not to sell or share your personal information for cross-context behavioral advertising.
- Right to Limit Use of Sensitive Personal Information: Where applicable, limit how we use and disclose your sensitive personal information.
- Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.
9.4 Categories of Personal Information We Collect (CCPA)
Within the past 12 months, we have collected the following categories of personal information:
- Identifiers (e.g., name, email address, IP address) — Yes
- California Customer Records categories (e.g., name, address, phone number) — Yes
- Internet or network activity (e.g., browsing history, interactions with our Service) — Yes
- Protected classification characteristics — No
- Commercial information — No
- Biometric information — No
- Geolocation data — No
- Sensory data — No
- Professional or employment-related information — No
- Non-public education information — No
- Inferences drawn from personal information — No
9.5 Sale and Sharing of Personal Information
We may share identifiers, California Customer Records categories, and internet/network activity data with advertising partners in ways that may constitute a “sale” or “sharing” under the CCPA/CPRA. You have the right to opt out of this at any time by contacting us at [email protected] or using the “Do Not Sell or Share My Personal Information” link on our website.
9.6 Exercising Your Rights
To exercise any of your privacy rights, you (or your authorized agent) may contact us by:
- Email: [email protected]
We will verify your identity before processing your request. We will respond within 45 days for CCPA requests (extendable by an additional 45 days with notice) and within 30 days for GDPR requests (extendable to 90 days for complex requests). There is no charge for making a request.
10. Children’s Privacy
Our Service is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected personal information from a child under 13, we will take prompt steps to delete that information.
For users between 13 and 16 in California, we do not sell or share personal information without affirmative opt-in consent.
If you believe a child has provided us with personal information, please contact us at [email protected].
11. Links to Third-Party Websites
Our Service may contain links to third-party websites or services that are not operated by us. We have no control over, and assume no responsibility for, the content or privacy practices of those sites. We encourage you to review the privacy policy of any third-party site you visit.
12. Email Marketing
We may use your email address to send you newsletters, promotional materials, and updates about our Service. You may opt out of marketing emails at any time by clicking the “Unsubscribe” link in any email or by contacting us at [email protected]. Please note that we may still send you transactional or service-related communications.
13. Do Not Track
Some browsers include a “Do Not Track” (DNT) feature that signals to websites that you prefer not to have your online activity tracked. Currently, our Service does not respond to DNT signals, as there is no universally accepted standard for doing so. We will update this policy if industry standards change.
14. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:
- Post the updated policy on this page with a revised “Last Updated” date
- Notify you by email or by a prominent notice on our Service prior to the change becoming effective
We encourage you to review this policy periodically. Your continued use of the Service after any changes indicates your acceptance of the updated policy.
15. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Returnalyze, Inc.
25 Corporate Drive, Suite 100, Burlington, MA 01803
[email protected]
For EEA or UK residents, you also have the right to contact your local data protection authority if you believe our processing of your personal data violates applicable law.