Privacy Policy

Information we collect

• Account information, including your email address, password hash, account role, and preferences.
• Security and session data, including IP address, browser or device description, session timestamps, and failed sign-in attempts.
• Application settings, App Store identifiers, encrypted or access-controlled Apple API credentials, webhook configuration, and forwarding destinations.
• Signed Apple notification and transaction data needed to verify, respond to, retry, audit, and display refund requests and outcomes.
• Subscription and customer metadata received from Paddle. Refoid does not receive or store your complete payment-card details.
• Email delivery events needed to send account, recovery, and refund-result messages.

How we use information

We use this data to provide and secure the service, authenticate accounts, process Apple notifications, send configured responses, show the response timeline, enforce plan limits, forward notifications at your direction, send email, support billing, prevent abuse, diagnose failures, and meet legal obligations.

Service providers

Paddle acts as the merchant of record for subscriptions and payment administration. Resend processes service email. Hosting and infrastructure providers store and transmit service data on our behalf. Apple supplies and receives App Store data. Each provider processes data under its own terms and privacy practices.

Retention and security

We keep information for as long as needed to operate the account, maintain a reliable audit trail, resolve disputes, prevent abuse, and comply with law. Credentials are excluded from public responses, private keys are stored in restricted server storage, and network traffic uses encrypted connections. No security measure can eliminate every risk.

Your choices and rights

You can change notification and forwarding settings, end sessions, update your password, and request account deletion from Settings. Depending on where you live, you may also request access, correction, deletion, restriction, portability, or an objection to certain processing. We may need to verify your identity before acting.

Billing privacy

Paddle manages checkout, payment methods, tax handling, invoices, subscription changes, cancellations, and payment-related refunds. Review Paddle’s Buyer Terms and Refund Policy.

Support

Questions or privacy requests can be sent to support@refoid.app.