Privacy Policy
Last updated: 6 November 2026
ReRollBack (“the App”, “we”, “us”) is a Shopify app that backs up a Shopify store’s data and restores it when the store owner asks. It is provided by Gosocial Development SRL, 20 Iancu Jianu Street, Brașov, Romania.
This policy explains what information the App handles, why, where it is kept, for how long, and the choices you have. It applies to merchants who install the App, and to the customers of those merchants whose information is included in a backup.
1. Our role
- For your store’s data and your customers’ data, we act as a data processor on your behalf. You, the merchant, decide what is backed up by installing the App, and you remain the controller of your customers’ personal data. We use it only to provide the App to you, as described here.
- For the information about you as our user (your store’s domain and anything you send us when you contact us), we are the controller.
2. What the App collects
When you install the App, Shopify gives it access to your store through Shopify’s Admin API, limited to the permissions you approve. The App then collects:
- Store data: products, collections, inventory levels, files, pages, blog posts, menus, redirects, discounts, themes, translations, markets, shipping and other store settings.
- Customer data: customer names, email addresses, phone numbers, addresses, tags, number of orders and amount spent.
- Order data: order numbers, dates, totals, line items, and the customer’s name, contact details and shipping address on each order. By default Shopify gives apps the last 60 days of orders.
- Information about your store as our user: your store’s domain, and the access token Shopify issues so the App can run backups on schedule. We do not collect personal information about you or your staff through the App.
- When you contact us: your email address and what you write to us.
- Technical logs: our web server records requests to the App, including IP addresses.
The App does not use cookies or similar technology for analytics, advertising or tracking.
3. How we use it
We use the information only to provide the App:
- to take daily and on-demand backups of your store;
- to show you your backups and restore the data you choose;
- to answer your support requests;
- to keep the App secure, and to keep a record of when protected customer data was accessed or deleted;
- to meet our legal obligations, including Shopify’s privacy requests (section 5).
We do not sell your data or your customers’ data, share it for advertising, or use it for any purpose other than providing the App.
4. Where it is stored and who processes it
Your data is stored on servers in London, United Kingdom, run by Akamai Technologies (Linode). The United Kingdom is covered by an EU adequacy decision, so personal data can be kept there under the GDPR. Data is encrypted in transit (TLS) and at rest (AES-256).
Service providers that process data for us:
| Provider | What for | Location |
|---|---|---|
| Akamai Technologies (Linode) | Hosting the App and its backups | London, United Kingdom |
| Google (Google Workspace) | Support email | Google’s data centres |
We share data with no one else, except when the law requires it.
5. Customer privacy requests
Shopify passes customer privacy requests to the App:
- When a customer asks a store for their data, we provide the store with what our backups hold about that customer.
- When a store asks for a customer’s data to be erased, we remove that customer from every backup on our server and from archives uploaded for a restore. We keep only the customer’s Shopify ID, so that no later restore can bring their data back.
- When you uninstall the App, we delete everything we hold for your store (section 6).
6. How long we keep it
| What | How long |
|---|---|
| The latest daily backup on our server | Replaced every night. If backups stop, its customer and order data is deleted after 30 days. |
| Backups you run by hand | Store data while the App is installed; the customer and order data in them is deleted after 30 days |
| Archives you upload for a restore | Deleted within 24 hours |
| Web server logs | 14 days |
| Support emails | As long as needed to handle your request and keep a record of it |
| After you uninstall | Shopify notifies us 48 hours after you uninstall. We then delete all data for your store from our server. We keep a record that the deletion happened (your store’s domain and the date), with no customer data. |
You can ask us to delete your backups at any time by writing to info@gosocialdev.eu.
7. Your rights
Depending on where you live, including under the EU and UK GDPR, you have the right to access, correct, delete, restrict or object to the processing of your personal data, and to receive a copy of it. To use these rights, write to info@gosocialdev.eu.
If you are a customer of a store that uses the App, please contact that store first. It controls your data, and we will help it answer your request.
You also have the right to complain to your local data protection authority.
8. Security
Access to backups is limited to the people who run the App. Every access to protected customer data is recorded in a log. Backups are encrypted, and the App’s server accepts only key-based administrative access.
9. Changes to this policy
We may update this policy. The date at the top shows when it last changed. If a change is significant, we will tell merchants by email or in the App before it takes effect.
10. Contact
Gosocial Development SRL
20 Iancu Jianu Street, Brașov, Romania
info@gosocialdev.eu