Privacy Policy

What RefundRadar does

RefundRadar is a browser extension and web service that monitors your purchases at supported retailers and alerts you when a price drop makes you eligible for a policy-backed refund. We charge a 25% success fee only after you confirm you received money back.

Data we collect

• Purchase information detected on retailer order confirmation pages (product name, price, order number, retailer, purchase date)
• Your email address and account details when you sign up
• Price history data we fetch from retailer websites
• Claim status and refund amounts you confirm

Gmail permission

If you choose to connect Gmail for automatic claim submission, RefundRadar requests the following permissions:

• gmail.send — used solely to send price adjustment claim emails to retailers from your own Gmail account on your behalf
• gmail.readonly — used solely to detect retailer replies to claim emails we sent, to automatically confirm claim outcomes

We never scan, read, or store your general inbox. We only access the specific email threads that RefundRadar created.

Copies of retailer replies

Claim emails we send on your behalf ask the retailer to reply both to you and to a private RefundRadar address created for that single claim. This lets us confirm the outcome without reading your mailbox. It means a copy of the retailer's reply to that claim — which may quote your original claim email, including the order details and evidence it contained — is received and stored on our servers.

You always remain a direct recipient of the reply; we are added alongside you, never in your place. This applies only to replies to claims RefundRadar sent, and each address is unique to one claim, so it cannot receive any of your other mail.

What we do NOT do

• We do not scan your email inbox
• We do not sell your data to third parties
• We do not store your payment card details (Paddle handles all payments)
• We do not claim guaranteed refunds — retailers make all final decisions

Data storage and security

Purchase data, order numbers, and Gmail tokens are encrypted at rest using AES-256-GCM. We use Supabase (hosted on AWS) for database storage. Evidence screenshots are stored in Supabase Storage.

Payments

Payments are processed by Paddle, who acts as Merchant of Record. RefundRadar never sees or stores your card details. Paddle's privacy policy applies to payment data: paddle.com/legal/privacy

Your rights

You can request deletion of your account and all associated data at any time by emailing us. We will delete your data within 30 days.

Contact

For privacy questions: privacy@refundradar.app