Effective Date: February 26, 2026
Last Updated: February 26, 2026
This privacy policy (“Privacy Policy”) describes how Redo Tech Inc. (“Redo,” “we,” “our,” or “us”) collects, uses, processes, retains and discloses personal information about you and your data privacy rights. Personal information has different meaning depending on applicable privacy laws. However, in its broadest terms, it means any information that directly or indirectly identifies you or is reasonably capable of being associated with you or, in some cases, your household. Personal information does not include information about organizations, or anonymized data that is not capable of identifying you.
We will only collect, use, process, retain, and disclose personal information as described in this Privacy Policy. If required, Redo will offer individuals the opportunity to choose (opt-out) whether their personal information is (a) to be disclosed to a non-agent third party, or (b) to be used for a purpose other than the purpose for which it was originally collected or subsequently authorized by the individual. For more information about exercising your privacy rights, see the Your Privacy Rights section below.
This Privacy Policy applies to the Redo website located at https://www.getredo.com/ and Redo application found at https://app.getredo.com/. The use and access of Redo’s website and application, including the features generally made available by Redo from time to time, shall be collectively referred to as the “Services.” This Privacy Policy also applies to personal information we collect from: (1) merchants who install the Redo application on their ecommerce websites, apps or other platforms (“Merchants”); (2) consumers who use Redo’s Services directly or via Merchants’ websites, apps or other platforms (“Consumers”); (3) our business-to-business contacts who provide services to Redo, such as partners, service providers or contractors (“B2B Contacts”); and (4) individuals who otherwise interact with us on the Redo application, website, and/or through third-party websites.
We may provide different or additional notices of our privacy practices with respect to other personal information collection practices not within the scope of this Privacy Policy, in which case this Privacy Policy will not apply. For example, this Privacy Policy does not apply to employees or job applicants. If you are an applicant or employee, please contact us for more information on how your personal information may be handled.
We will comply with applicable privacy laws when using your personal information. The privacy laws affecting your personal information will depend on the country you are a resident in. For example, the General Data Protection Regulation (“EU GDPR”) applies to individuals residing in the European Economic Area (“EEA”), or the “UK GDPR” in the UK.
We may also change this Privacy Policy from time to time to reflect changing legal, regulatory or operational requirements. If we make changes, we will notify you by revising the date at the top of this Privacy Policy. We encourage you to review this Privacy Policy regularly to stay informed about our information practices and the choices available to you. Depending on applicable law, your continued use of the Services after we make changes constitutes deemed acceptance of these terms.
This notice describes how we collect, use, and disclose personal information we collect from or about you.
We collect personal information you provide directly to us. For example, we collect personal information directly from Merchants who register to use our application on their ecommerce websites, B2B Contacts when we conduct business dealings with them, and generally from individuals who respond to our inquiries, surveys, communications, offers, or marketing. The types of personal information that we may collect varies depending on how you interact with us:
We and our third-party providers automatically collect certain personal information about your interactions with us or our Services. We collect this information using cookies and similar tracking technologies (such as web beacons and SDKs). This information includes internet or other electronic network activity information, IP address, unique personal identifiers, and other similar identifiers.
Cookies are small data files stored on your hard drive or in device memory that help us improve our Services and your experience, see which areas and features of our Services are popular, and count visits. Web beacons (also known as “pixel tags” or “clear GIFs”) are electronic images that we use on our Services and in our emails to help deliver cookies, count visits, and understand usage and campaign effectiveness.
If you are a Consumer, we and our third-party providers may collect data through cookies and other tracking technologies when you visit a Merchant’s website, app or platform, or interact with Merchant emails or SMS messages with our tracking features enabled.
We use information collected via cookies for various purposes, including:
For more information on our use of cookies and other tracking technology, please see our Cookie Policy. For more information on how to disable cookies, see Your Choices About Cookies below.
We obtain personal information from other sources. For example, we may collect information from advertising networks, data analytics providers, operating systems and platforms, mailing list providers, social networks, and other advertising partners. This information includes your contact information (website only) and usage data collected through cookies and other trackers on our website and Redo application described in our Cookie Policy. We may also obtain personal information about you from third-party fraud-detection service providers. This information includes contact information and prior transaction history across other businesses. We use this personal information to inform Merchants regarding the likelihood of a transaction being fraudulent.
We will also receive personal information from and through Merchants regarding the Consumers whom they offer their products and/or services to, including on their websites and online services. For example, when Merchants use our Email and SMS platform, they may upload Consumer contact information in order to send Consumers messages through our platform. If a Merchant uses our Claims Management product or Order Tracking product, we may receive and process communications from its Consumers related to claims and orders. We also process Consumer information in connection with our AI Sales and Support services.
Merchants are responsible for ensuring that any personal information they provide to us is in compliance with applicable privacy laws, including, but not limited to, ensuring that notice is provided to Consumers about the sharing of their personal information with us and, where applicable, obtaining appropriate consent. For example, with respect to our Cross-Merchant Data Sharing services (discussed in section II. Disclosure of Your Personal Information below), Merchants must ensure that Consumers have received appropriate notice and provided the required consent, where required by applicable privacy laws. In addition, as an independent controller of your personal information, we are providing this Privacy Policy to describe our personal information processing practices and your rights depending on your location, as described in section VIII. Exercising Your Privacy Rights below.
We may use personal information provided by Merchants in the following ways:
We may also process Consumer personal information for our own purposes, including to personalize and improve your experience on the Services; to monitor and analyze trends, usage, and activities in connection with the Services; and to generate customer behavioral profiles for Consumers based on historic shopping data in order to detect potential fraudulent behavior patterns and create tailored shopping recommendations. With your consent (where required by law), we may also share Consumer personal information with other Redo Merchants in connection with our Cross-Merchant Data Sharing services (further discussed in section II. Disclosure of Your Personal Information below).
We may derive personal information or draw inferences about you based on the information we collect or receive about you. For example, we may make inferences about your approximate location based on your IP address or infer your purchasing interests, shopping habits and likelihood of fraudulent transactions based on your browsing behavior and past purchases.
Our Use of Automated Decision Making: We may process Consumer personal information using automated decision making technology and profiling, and artificial intelligence (“AI”) systems, including agentic AI, to provide personalized product recommendations, for advertising and marketing purposes, to help our Merchants evaluate and facilitate returns and exchanges of products, and for fraud detection. Our AI systems operate by integrating with AI models provided by third-party foundation and large language AI model providers. While these models are not trained on your data, we may input your personal information (including shopping activity and interactions with the Merchant) into the prompts we send to our AI models, to improve the quality of output. Because of the probabilistic nature of machine learning and AI, the AI models that our systems rely on may not always be accurate. Please note that we will not use such technology to make decisions that produce legal or similarly significant effects, such as decisions that result in the provision or denial of financial and lending services, housing, insurance, education enrollment or opportunities, criminal justice, essential government services, employment or independent contracting opportunities or compensation, health care services, legal services, or access to essential goods or services or basic necessities.
In addition to the purposes described above, we may use any personal information we collect for the following purposes in accordance with applicable law:
In the EEA and UK, the EU GDPR and UK GDPR requires us to identify a “lawful” or “legal” basis for the processing (our use) of your personal information. The lawful bases we have identified are set out in more detail in the Summary of Prior 12-Month Personal Information Processing Activities section below.
We may disclose your personal information in the following circumstances or as otherwise described in this Privacy Policy:
If you are in the United States, to learn more about the categories of personal information we may disclose, sell or share and the categories of recipients, please see the Summary of Prior 12-Month Personal Information Processing Activities and Selling or Sharing of Personal Information (United States Only) sections below.
We take steps to protect your personal information with appropriate physical, administrative, organizational, and technical safeguards. However, perfect security does not exist, and therefore we cannot 100% guarantee the security of your personal information.
We store personal information for as long as necessary to carry out the purposes for which we originally collected it and for other legitimate business purposes, including to meet our legal, regulatory, or other compliance obligations. Specifically, we will keep the personal information of Merchants, Consumers, and B2B Contacts as long as we have a continuing relationship with them to provide or receive Services and for up to 6 years thereafter, unless we need to retain the personal information for an additional length of time under the law.
Under some privacy laws, certain types of personal information are considered “sensitive” or “special” personal information or data and require additional data privacy rights and obligations. Redo does not process “special” personal information under the EU GDPR and UK GDPR. However, the financial information described in this Privacy Policy may be considered “sensitive” under US privacy laws or other applicable privacy laws.
Specifically, Redo does not see any information that constitutes “sensitive” personal information or data under these laws, but you may provide to banks, processing gateways, and merchant processors your sensitive financial account, debit card, or credit card information when using our Services. Redo facilitates your provision of this information to these parties in order to provide our Services. This information may also be used to prevent, detect, and investigate security incidents, resist malicious, deceptive, fraudulent, or illegal actions and prosecute those responsible, and ensure physical safety of natural persons. Because this “sensitive” personal information is used for limited and permitted purposes, we do not offer a limit use and disclosure of sensitive personal information right. However, where required by law, we will obtain your consent before such sensitive personal information is collected. You may withdraw your consent by contacting us at privacy@getredo.com.
Most web browsers are set to accept cookies by default. If you prefer, you can usually adjust your browser settings to remove or reject browser cookies. Please note that removing or rejecting cookies could affect the availability and functionality of our Services.
If you wish to reject the use of non-essential cookies, you can also use the ‘Cookie Preferences’ banner at the bottom of our website.
The Services are not intended for or directed at children under the age of 18. In addition, we do not knowingly collect personal information from children under the age of 18. We also do not knowingly sell, share, use for targeted advertising, or disclose the personal information of children under the age of 18.
We honor opt-out preference signals. An opt-out preference signal is a signal that is sent by a platform, technology, or mechanism on your behalf that communicates your choice to opt-out of the sharing for targeted advertisements or sale of your personal information. You can learn more about implementing opt-out preference signals here or by exploring other developing technologies and services that offer this tool. We treat opt-out preference signals as valid requests to opt-out of the sale or sharing of your personal information under privacy laws. Please note that you can also opt-out of the sale or sharing of your personal information for targeted advertising through our other methods described in the Instructions on How to Exercise Your Privacy Rights section below.
Some browsers have incorporated “Do Not Track” features. Most of these features, when turned on, send a signal or preference to the websites you visit indicating that you do not wish to be tracked. Because there is not yet a common understanding of how to interpret the do not track signal, we currently do not respond to the browser do not track signals. However, as noted above, we do honor opt-out preference signals.
Data privacy laws afford consumers residing in the United States certain rights with respect to their personal information, subject to certain exceptions. If you reside in the United States, this section applies to you. Subject to certain limitations, you have the following rights in the United States:
In certain circumstances, under the EU GDPR and UK GDPR you will have the following rights:
If you want to access, rectify or request deletion of your personal information, object to the processing of your personal information, request that we transfer a copy of your personal information to another party, or withdraw your consent to processing (if applicable), please contact us using the information set out below.
If you are dissatisfied with the handling of your personal information, you have a right to lodge a complaint with the data protection supervisory authority where you live. In the UK, this would be the Information Commissioner’s Office. In the EU, this would be the Irish Data Protection Commission.
If you live in Canada, you may have certain rights under Canadian privacy law (as applicable and subject to certain limitations):
To exercise any of these rights, please contact us using the information set out below.
You may exercise your privacy rights by emailing us at privacy@getredo.com.
Subject to applicable laws, you may also opt-out of the sale of your personal information or sharing of your personal information for targeted advertising by clicking on the Do Not Sell or Share My Personal Information link, which can be found on the footer of this website.
In some instances, we will need to verify your identity before honoring your privacy rights request. We will verify your identity by asking you to provide personal information related to your recent interactions with us. We will honor your privacy rights request within 30 calendar days of receipt, unless a shorter period is required by applicable law, or if we request an extension as permitted by data privacy law. However, we will honor opt-out of sale and sharing requests within 15 business days. We do not need to verify your identity for opt-out of sale or sharing requests, but we may ask for additional information to find you on our services.
You may appeal a denial of your privacy right requests by emailing us at privacy@getredo.com. Where required by applicable law, within 30 days of receipt of an appeal (or shorter period if required by applicable law), we will inform you in writing of any action taken in response to the appeal, including a written explanation of the reasons for the decisions. If we deny your appeal (or your access request where applicable), you may submit a complaint to the Attorney General of your state (US) or applicable privacy commissioner (Canada) and the Commission d’accès à l’information du Québec for Quebec individuals.
If permitted or required by applicable law, you may exercise your privacy rights through an authorized agent (which may include a guardian, tutor, or conservator). If we receive your request from an authorized agent, we may ask for evidence that you have provided such agent with a power of attorney or that the agent otherwise has valid written authority to submit requests to exercise rights on your behalf. If you are an authorized agent seeking to make a request, please contact us at privacy@getredo.com.
Redo is headquartered in the United States, and we have operations and/or service providers in the United States and other countries. Therefore, we and our service providers may transfer your personal information to, or store or access it in, jurisdictions that may not provide levels of data protection that are equivalent to those of other countries (such as in the EEA or UK). We will take steps to ensure that your personal information receives an adequate level of protection in the jurisdictions in which we process it. For more information on the safeguards used, see the Data Privacy Framework Notice below.
In the preceding 12 months, we have collected the categories of personal information set forth in the table below. For details about the precise data points we collect and the categories of sources of such collection, please see the Collection and Use of Your Personal Information section above. We collect personal information for the business and commercial purposes described in that section. In the preceding 12 months, we have disclosed the following categories of personal information for business purposes to the following categories of recipients, which we also describe in greater detail in the Disclosure of Personal Information section above:
| Category of Personal Information we Collect | Business Purpose (and Lawful Basis) for Disclosure and Processing | Category of Recipients |
|---|---|---|
Identifiers, such as name, email address, phone number, physical address, date of birth, IP address, unique personal identifiers, and other similar identifiers. |
|
|
|
Sensitive personal information, such as financial account, debit card, or credit card information.* *Please note that Redo does not see such information, but you may make this type of sensitive personal information available to banks, processing gateways, and merchant processors when receiving our services. |
|
|
Characteristics of protected classifications under California or federal law, such as age. |
|
|
Commercial information, including records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. |
|
|
Internet or other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding a consumer’s interaction with an internet website application or advertisement. |
|
|
Geolocation data, such as your physical address and approximate location based on IP address. |
|
|
Audio, electronic, visual, or similar information, such as video/audio recordings of business meetings. |
|
|
Professional or employment-related information, such as your title and company you work for. |
|
|
Inferences from any of the information identified in this subdivision to create a profile about a consumer reflecting the consumer’s preferences, characteristics, predispositions, and behavior, such as interests and purchasing habits. |
|
|
Below, we describe the categories of personal information we may sell or share for targeted advertising currently and in the preceding 12 months. We also describe the third parties who received or may receive the personal information and the business or commercial purpose for the sale or sharing. We do not knowingly sell or share the personal information of children under the age of 18, and have not done so in the prior 12 months.
| Category of Personal Information | Sold or Shared | Category of Third Party | Business or Commercial Purpose for Sale or Sharing |
|---|---|---|---|
Identifiers, such as name, email address, phone number, physical address, date of birth, IP address, unique personal identifiers, and other similar identifiers. |
This category of personal information may be sold or shared. |
We may have shared or sold such personal information with third party advertising, marketing, AI system and model, and cookie providers, and with merchants interested in marketing their products and services to you and for fraud detection. |
We may have disclosed this category of personal information to provide advertising and marketing services and for fraud detection purposes. |
Characteristics of protected classifications under California or federal law, such as age. |
This category of personal information may be sold or shared. |
We may have shared or sold such personal information with third party advertising, marketing, AI system and model, and cookie providers, and with merchants interested in marketing their products and services to you and for fraud detection. |
We may have disclosed this category of personal information to provide advertising and marketing services and for fraud detection purposes. |
Commercial information, including records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. |
This category of personal information may be sold or shared. |
We may have shared or sold such personal information with third party advertising, marketing, AI system and model, and cookie providers, and with merchants interested in marketing their products and services to you and for fraud detection. |
We may have disclosed this category of personal information to provide advertising and marketing services and for fraud detection purposes. |
Internet or other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding a consumer’s interaction with an internet website application or advertisement. |
This category of personal information may be sold or shared. |
We may have shared or sold such personal information with third party advertising, marketing, AI system and model, and cookie providers, and with merchants interested in marketing their products and services to you and for fraud detection. |
We may have disclosed this category of personal information to provide advertising and marketing services and for fraud detection purposes. |
Geolocation data, such as your physical address and approximate location based on IP address. |
This category of personal information may be sold or shared. |
We may have shared or sold such personal information with third party advertising, marketing, AI system and model, and cookie providers, and with merchants interested in marketing their products and services to you and for fraud detection. |
We may have disclosed this category of personal information to provide advertising and marketing services and for fraud detection purposes. |
Inferences from any of the information identified in this subdivision to create a profile about a consumer reflecting the consumer’s preferences, characteristics, predispositions, and behavior, such as interests and purchasing habits. |
This category of personal information may be sold or shared. |
We may have shared or sold such personal information with third party advertising, marketing, AI system and model, and cookie providers, and with merchants interested in marketing their products and services to you and for fraud detection. |
We may have disclosed this category of personal information to provide advertising and marketing services and for fraud detection purposes. |
California law permits residents of California to request certain details about how their information is shared with third parties for direct marketing purposes. If you are a California resident and would like to make such a request, please contact us at privacy@getredo.com.
As a supplement to the information provided throughout this Privacy Policy, we provide the following information as a notice in accordance with our obligations as a participating organization under the EU-U.S. Data Privacy Framework and the UK Extension to the EU-U.S. DPF.
Redo complies with the EU-U.S. Data Privacy Framework (“EU-U.S. DPF”) and the UK Extension to the EU-U.S. DPF as set forth by the U.S. Department of Commerce. Redo has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (“EU-U.S. DPF Principles”) with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. DPF. If there is any conflict between the terms in this Privacy Policy and the EU-U.S. DPF Principles, the EU-U.S. DPF Principles shall govern. To learn more about the Data Privacy Framework (“DPF”) program, and to view our certification, please visit the Data Privacy Framework website.
Please note, personal information transferred outside of Canada may be accessible to lawful orders from foreign courts, law enforcement and national security entities. If you are located in Quebec, your personal information may be communicated outside of Quebec. If you are located in Alberta and you have any questions, or wish to receive further written information about our policies and practices with respect to service providers or affiliates outside of Canada, please contact our Privacy and Security Team at privacy@getredo.com.
Our Chief Technology Officer has overall responsibility for our compliance with applicable privacy laws. However, certain functions have been assigned to:
Please note that for purposes of Google Workplace API, our application will not retain user data obtained through Workplace API to develop, improve, or train generalized artificial intelligence and/or machine learning models. In addition, Redo does not sell Google’s user data to third parties.
If you have any questions about this Privacy Policy, please contact our Privacy and Security Team at privacy@getredo.com.
Our representative in the UK is GDPRLocal Ltd., 1st Floor Front Suite 27–29 North Street, Brighton England BN1 1EB (Email: contact@gdprlocal.com, Telephone: 441 772 217 800).
Our representative in the EU is Instant EU GDPR Representative Limited, Office 2, 12A Lower Main Street, Lucan Co. Dublin K78 X5P8 Ireland (Email: contact@gdprlocal.com, Telephone: 353 15 549 700).
Redo powers the post-purchase experience for modern brands, making every return an opportunity to retain customers, protect margins, and build lifetime value.
By clicking Submit, I agree to receive promotional messages from Redo via email, text, or phone. I can update preferences via email link or by texting STOP.
Reply HELP for support. Msg & data rates may apply, frequency of message varies.