Privacy Policy

---

Effective date: [January 9, 2026]
Company: RaeJax Inc. (“RetainAIO,” “we,” “us,” “our”)
Support contact: support@retainaio.com
Website: retainaio.com

This Privacy Policy describes how RetainAIO collects, uses, and shares information when merchants install and use the RetainAIO Shopify app (the “App”).

1. Information We Collect

When you install and use the App, we may collect and process the following categories of information:

Merchant / store information

• Store domain (e.g., your-store.myshopify.com)
• Shopify store identifiers
• App configuration settings (e.g., onboarding flow settings, access instructions, brand voice)

Customer and order information (as permitted by the merchant and Shopify)

• Customer email address (if provided by Shopify and necessary to send      onboarding/access messages)
• Order information required to trigger and personalize onboarding/access emails (e.g., order ID, purchased product names, payment status)

Email delivery data

• Email send status (queued/sent/failed)
• Delivery metadata returned by our email provider (e.g., message IDs,      bounce/suppression events)

Privacy compliance requests

• Shopify privacy webhooks and related payloads (e.g., data access requests, redaction requests) for audit and compliance.

2. How We Use Information

We use the collected information to:

• Provide the App’s functionality (send onboarding and access emails to customers on      behalf of merchants)
• Generate email content based on merchant-provided instructions and settings
• Deliver and troubleshoot email sending (including retries and bounce/suppression      handling)
• Maintain an audit trail for privacy compliance requests
• Improve the App, prevent abuse, and maintain security

3. Legal Basis (GDPR / similar laws)

Where applicable, we process personal data on the following bases:

• Performance of a contract (to provide the App to the merchant)
• Legitimate interests (security, preventing abuse, maintaining reliability)
• Compliance with legal obligations (responding to privacy requests)
• Merchants are responsible for ensuring they have appropriate lawful basis and notices to their customers for sending emails, where required.

4. Sharing of Information

We share data only as needed to operate the App. This may include sharing with:

• Service providers that help us run the App, such as:
  • Hosting/infrastructure providers
  • Database providers
  • Email delivery provider (e.g., Postmark)
  • AI content generation provider (e.g., OpenAI) strictly for generating email copy
• Shopify as needed for app functionality, authentication, and compliance webhooks
• Authorities if required by law

We do not sell personal information.

5. Use of AI for Email Content

The App may use an AI provider to generate suggested email subject/body text based on:

• Merchant settings (brand voice, access instructions)
• Product/order context

We instruct the AI not to invent access instructions and we limit generation based on merchant-provided configuration. The App may record generation counts and token usage for cost controls and audit.

6. Data Retention

We retain data only as long as necessary to provide the App and meet legal/compliance requirements.
Typical retention includes:

• Message records and send logs for troubleshooting and auditing
• Privacy request audit records as required for compliance

7. Data Deletion and Privacy Requests

The App supports Shopify’s required privacy compliance mechanisms. Upon receiving relevant Shopify privacy requests (such as customer redaction or shop redaction), we will delete or anonymize data as required.

Merchants can also request deletion by contacting: support@retainaio.com

8. Security

We implement reasonable administrative, technical, and physical safeguards designed to protect information. No method of transmission or storage is 100% secure, but we work to protect your data.

9. International Transfers

Your data may be processed in countries other than your own depending on where our service providers operate. Where required, we rely on appropriate transfer mechanisms.

10. Children’s Privacy

The App is intended for use by merchants and is not directed at children.

11. Changes to This Policy

We may update this policy from time to time. We will post updates on this page and update the effective date above.

12. Contact Us

For questions, requests, or complaints regarding this policy, contact:
support@retainaio.com