How Predispute handles your data

What it reads

Predispute connects through the read-only scopes your platform grants at install. On Shopify and Stripe that is your disputes and the orders or charges behind them: amounts, reason codes, networks, dates, the issuing bank where the platform provides it, and the fulfilment and address details already attached to the order.

Access is read-only. Predispute never writes to your store, moves money, or changes your orders.

What it never touches

No full card numbers, no CVV codes, no bank account numbers, no cardholder Social Security numbers. Predispute works from dispute and order metadata alone, which keeps it outside PCI DSS scope.

Where it runs

Your data is encrypted in transit and at rest and held with a small set of vetted infrastructure providers. It is never sold and never shared with advertisers. Improvements to the decisioning logic use only anonymized, aggregated metadata, never identifiable store data.

How long it stays

Getting it deleted

Uninstalling the app deletes your store's data. Shopify's mandatory erasure requests are honored automatically, and you can ask us to access, correct, or delete anything by emailing hello@predispute.com; we respond within 30 days.