Effective October 4, 2026 · From Andamento Advisors LLC
This policy explains what data Predispute receives when you install and use it, how it is used, and how long it is kept.
Predispute is operated by Andamento Advisors LLC, a Delaware limited liability company. It is an app for Shopify and Stripe merchants. It works out your dispute rate from your own orders and helps you decide how to handle each dispute.
You can reach us about anything in this policy at hello@predispute.co.
Store and dispute data. When you install the app, your platform (Shopify or Stripe) grants access to read your payment disputes and orders or charges, and, on Shopify, to place evidence on a dispute when you ask. We receive dispute metadata (amount, reason code, network, status, dates, and the issuing bank identifier where available) and the order and fulfilment records tied to a dispute (line items, delivery and tracking, and the billing and shipping details already on the order). These are used to calculate your dispute rates and assemble evidence readiness. When a dispute arrives, we also collect the information on that order relevant to responding to it. That is the customer's name, email address, billing and shipping addresses, and the IP address recorded with the purchase. We use it to prepare the response to the dispute. On Shopify the app also reads the name your Shopify Payments account prints on card statements, and that account's country.
Account information. Your store domain and contact email, used to identify your install.
Operational logs. Webhook traces, error logs, and timestamps, used for debugging and abuse prevention.
Billing data. If you subscribe, your platform handles the charge under its own privacy policy. We receive your plan and subscription status, not your payment details.
We never store full primary account numbers (PANs), CVV codes, bank account numbers, or cardholder Social Security numbers. The app reads only the data described above, which keeps the service outside PCI DSS scope.
We do not knowingly collect data from anyone under 18. The service is for businesses, not consumers, and is not directed to children.
To calculate your chargeback rates on every card brand you take, and recommend how to handle each dispute.
To improve the drafting and decisioning logic. We anonymize dispute metadata (reason code, issuing bank, outcome) and aggregate it across merchants; we do not share identifiable merchant data with anyone.
To comply with law, respond to lawful requests, and establish, exercise, or defend legal claims.
Predispute does not email you. Anything you need to know appears in the dashboard, and we do not send marketing emails.
We do not sell your data. We use a small set of trusted service providers to run the service, for example to host the application, store data, and send transactional email. Each handles data only to provide its function to us and is bound by its own contractual and security obligations.
We may also disclose data when required by law, to enforce our agreements, or in connection with a merger, acquisition, or sale of assets, in which case we will require the recipient to honor this policy.
| Dispute and volume snapshots | 13 months, then reduced to monthly aggregates |
| Customer details collected for a dispute | 30 days after the dispute is decided |
| Computed ratios and anonymized outcomes | Indefinitely |
| Alerts | 12 months |
| Store profile | While the app is installed, plus 30 days |
| Error and webhook logs | 30 days |
You can ask us to access, correct, or delete the data we hold about your store. Email hello@predispute.co and we respond within 30 days. Uninstalling the app also triggers deletion of your store's data, and the mandatory data-erasure requests Shopify sends on a customer's or store's behalf are honored automatically.
If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act, gives you the right to know what personal information we collect, to request deletion, to request correction, and to be free from discrimination for exercising these rights. We do not sell personal information.
Data is encrypted in transit (TLS) and at rest. Secrets are stored in our hosting provider's encrypted environment-variable store. Accounts that can view the service's internal dashboards use two-factor authentication. We do not handle PCI-scoped cardholder data.
The marketing pages set a small number of first-party cookies. Some serve the pages and hold your session. One records the campaign parameters in the address you arrived on. One holds a random identifier that means nothing outside this site and exists so that several page views in one sitting read as a single visit rather than several strangers. One remembers your answer to the question below, so that we ask it only once.
We use third-party measurement on these pages. Our hosting provider counts page views and page-load speed without cookies and without identifying anyone. A product-analytics service records which pages a visit touched and how it arrived, and on the marketing pages it may record a replay of the session in which every form field and every piece of on-screen text is masked in your browser before anything is sent. Inside the app, where your orders, charges and disputes appear, replay is switched off entirely, so no recording can reach that data.
In the European Economic Area, the United Kingdom and Switzerland none of this loads until you agree to it, and the site works the same whether you agree or not. Everywhere else it runs unless you decline, which you can do from the same notice or by writing to us. We also record the country the request came from, and where a visit comes from a corporate network we may resolve that network to the organisation that owns it; the address used for that resolution is discarded and never written to our records.
Write to hello@predispute.co if you want the current list of the providers involved.
When we make a material change, we will update the effective date at the top of this page. The current version always lives at this URL.
Questions or requests about this policy: hello@predispute.co.