Rebatory Privacy Policy
Last updated: September 5, 2026.
Rebatory is a store credit, cashback, and VIP loyalty app for Shopify merchants ("Merchants"). This page explains what personal data Rebatory processes about a Merchant's customers ("Customers") and why.
What we collect
Shopify sends Rebatory a Customer's information when the Customer creates an account or signs in on the Merchant's storefront, and when they place a paid order. In each case Rebatory stores:
- the Shopify customer ID
- email address
- first and last name
- the customer's cumulative order spend with that Merchant
- referral relationships (which customer referred which, if the Merchant's referral program is enabled)
Rebatory does not collect phone numbers or shipping/billing addresses.
Why we collect it
Solely to operate the store credit, cashback, and VIP loyalty program: identifying returning customers, calculating their VIP tier and applicable cashback rate based on total spend, and issuing store credit rewards to their account.
How we use it
We do not sell this data, and we do not use it for advertising or marketing. It is used only to run the credit/cashback/loyalty program described above, on behalf of the Merchant whose store the Customer ordered from.
Who can access it
Only the Merchant (through their own store's records) and Rebatory's operator, for the purpose of running and supporting the app. See our DPA for the small number of infrastructure providers (sub-processors) involved in running the app.
Children's data
Rebatory is not directed at children, and we don't knowingly process data we know belongs to a child beyond what Shopify itself sends us as part of normal order processing.
Retention & deletion
Data is retained for as long as the app remains installed on a Merchant's store. Merchants or Customers can request deletion by contacting us (see below).
When a Merchant deletes a Customer in Shopify, Rebatory immediately removes that Customer's name and hides them from the active customer list. The Customer's email address is retained only until Shopify sends the standard customer-redact request (which Shopify may defer for up to six months after the Customer's last order), at which point the email and remaining identifying fields are erased. During that short window the email is used solely to prevent referral-reward abuse (for example, deleting and re-creating an account to claim a referral reward again). Store-credit balances and transaction history are the Merchant's financial records and are kept in anonymised form.
Your rights
Depending on where you're located, you may have rights to access, correct, or delete your personal data. If you're a Customer, please contact the Merchant's store directly — they're the data controller. If you're a Merchant, contact us using the details below.
Company information
Rebatory is operated by Maurice Samba, Große Bergstraße 17, 30989 Gehrden, Germany.