How Predispute handles your data

What it reads

Predispute connects through the scopes your platform grants at install. On Shopify and Stripe that is your disputes and the orders or charges behind them: amounts, reason codes, networks, dates, the issuing bank where the platform provides it, and the fulfilment and address details already attached to the order. For each dispute it also collects the information on that order relevant to responding: the customer's name, email address, billing and shipping addresses, and the IP address recorded with the purchase. Predispute uses these to prepare the response to that dispute. On Shopify it also reads the name your Shopify Payments account prints on card statements, and that account's country.

Predispute reads your store. It writes dispute evidence only when you place it, removes only evidence it placed, and never submits a response, refunds an order, moves money or changes your orders.

What it never touches

No full card numbers, no CVV codes, no bank account numbers, no cardholder Social Security numbers. Predispute works from dispute and order data alone, which keeps it outside PCI DSS scope.

Where it runs

Your data is encrypted in transit and at rest and held with a small set of vetted infrastructure providers. It is never sold and never shared with advertisers. Improvements to the decisioning logic use only anonymized, aggregated metadata, never identifiable store data.

How long it stays

Getting it deleted

Uninstalling the app deletes your store's data. Shopify's mandatory erasure requests are honored automatically, and you can ask us to access, correct, or delete anything by emailing hello@predispute.co; we respond within 30 days.