PRIVACY POLICY

Keen Chargeback Solution Inc.

Effective Date: July 16, 2026

Last Updated: July 16, 2026

https://keensolution.com

Table of Contents

Keen Chargeback Solution Inc. ("Keen," "we," "our," or "us") provides chargeback recovery and dispute management services to merchants, including through our application on the Shopify platform. We recognize that our Services involve sensitive financial and transactional information, and we are committed to handling that information responsibly, transparently, and securely.

This Privacy Policy explains what information we collect, how we use and share it, the choices available to you, and the rights you may have under applicable law. It applies to our website at 

https://keensolution.com (the "Site"), our Shopify application (the "App"), and any related services, tools, or communications (collectively, the "Services").

Please read this Policy carefully. By accessing or using our Services, you acknowledge that you have read and understood this Policy. If you do not agree with our practices, please do not use our Services.

This Policy applies to:

• Visitors to our Site;

• Merchants who install, register for, or use our App or other Services ("Merchants," "you");

• Authorized users acting on behalf of a Merchant (e.g., employees, contractors);

• End customers of a Merchant whose order, transaction, or dispute information we process on the Merchant's behalf ("Merchant Customers"); and

• Any individual who otherwise contacts us regarding the Services.

Where we process Merchant Customer information, we generally do so as a service provider or processor acting on the Merchant's instructions, as described in Section 6 below.

The categories of information we collect depend on how you interact with us. We collect information directly from you, automatically through your use of the Services, and from third parties such as Shopify, payment processors, and card networks.

Category

Examples

Account & Contact Information

Name, company name, job title, email address, phone number,   business address, and login credentials.

Billing Information

Subscription plan, billing address, and payment details processed   via our payment processor (we do not store full card numbers).

Store & Order Information

Shopify store details, order records, product information, and   transaction history connected to your store.

Chargeback & Dispute Data

Chargeback notices, dispute reason codes, evidence documents,   correspondence with card networks or acquiring banks, and related case notes.

Customer Information (on behalf of Merchants)

Names, billing and shipping addresses, email addresses, phone   numbers, and order/transaction details of your customers, to the extent   necessary to prepare and submit dispute evidence.

Support Communications

Information you provide when contacting customer support,   including messages, attachments, and call or chat records.

Category

Examples

Technical & Device Data

IP address, browser type and version, operating system, device   identifiers, and general location inferred from IP address.

Usage Data

Pages viewed, features used, timestamps, referring/exit pages,   and interactions with the Site or App.

Cookies & Similar Technologies

Session cookies, authentication tokens, analytics identifiers,   and similar technologies described in Section 9.

• Shopify: store configuration, app permissions, and merchant account details necessary to operate the App.

• Payment processors and card networks: transaction status, chargeback and representment data.

• Fraud prevention and analytics partners: risk signals and aggregated usage insights.

We use the information described above for the following purposes:

• To provide, operate, and maintain the Services, including recovering chargebacks and preparing dispute evidence on your behalf;

• To create, authenticate, and manage Merchant accounts;

• To process subscriptions, invoices, and payments for our Services;

• To communicate with you about your account, updates, and support requests;

• To detect, investigate, and prevent fraud, abuse, and security incidents;

• To maintain the security and integrity of our systems;

• To analyze, troubleshoot, and improve the Services and to develop new features;

• To comply with legal obligations, enforce our agreements, and protect our rights and the rights of others; and

• For any other purpose disclosed to you at the time information is collected, or with your consent.

We do not use Merchant Customer information for our own marketing purposes, and we do not sell such information.

Where the General Data Protection Regulation ("GDPR") or UK GDPR applies, we rely on one or more of the following legal bases to process personal data:

Contract Performance

Processing necessary to   perform our agreement with you or to take steps at your request prior to   entering into a contract.

Legitimate Interests

Processing necessary for   our legitimate interests, such as securing our Services, preventing fraud,   and improving functionality, provided those interests are not overridden by   your rights.

Legal Obligation

Processing necessary to   comply with applicable law, regulation, or legal process.

Consent

Processing based on your   consent, such as certain cookies or marketing communications, which you may   withdraw at any time.

We disclose information only as necessary and appropriate for the purposes described in this Policy, including with:

• Shopify, in connection with operating and integrating the App with your store;

• Payment processors, banks, and card networks, to submit and manage chargeback disputes;

• Cloud hosting and infrastructure providers who store and process data on our behalf;

• Fraud prevention and analytics partners, to help detect and prevent fraudulent activity;

• Professional advisors, including legal, accounting, and audit professionals;

• Governmental or regulatory authorities, where disclosure is required by law, subpoena, or legal process;

• A successor entity, in connection with a merger, acquisition, financing, or sale of all or part of our business; and

• Other parties with your consent or at your direction.

We do not sell or rent personal information to third parties, and we do not share Merchant Customer information for third-party advertising purposes.

When we process Merchant Customer information to prepare and submit chargeback evidence, we act as a service provider (under the CCPA/CPRA) or processor (under the GDPR) on behalf of the Merchant. We process such information only as necessary to perform the Services and in accordance with our agreement with the Merchant. Merchants are responsible for ensuring they have the appropriate legal basis to share their customers' information with us and for responding to their own customers' privacy requests, with our reasonable assistance where required.

We retain personal information only for as long as reasonably necessary to:

• Provide the Services and maintain your account;

• Comply with applicable legal, tax, accounting, or regulatory requirements;

• Resolve disputes, including ongoing or potential chargeback proceedings;

• Maintain accurate business and financial records; and

• Enforce our agreements and protect against fraud or misuse.

When information is no longer needed for these purposes, we securely delete, anonymize, or aggregate it, unless we are required by law to retain it longer.

We maintain administrative, technical, and physical safeguards designed to protect personal information, including encryption of data in transit and, where appropriate, at rest; role-based access controls; multi-factor authentication for internal systems; continuous monitoring for suspicious activity; and confidentiality obligations for employees and contractors with access to personal information.

No method of transmission or storage is completely secure. If we become aware of a security incident affecting your personal information, we will notify affected parties and relevant authorities in accordance with applicable law.

We use cookies, pixels, and similar technologies to authenticate users and maintain sessions; remember preferences and settings; analyze how the Services are used; detect and prevent fraud; and enhance the security of our systems.

Most browsers allow you to control cookies through their settings. Disabling certain cookies may limit your ability to use some features of the Services. Where required by law, we will request your consent before placing non-essential cookies.

We are based in [Country] and may process information in the United States and other countries where we or our service providers operate. These countries may have data protection laws that differ from those in your jurisdiction.

Where we transfer personal information out of the EEA, UK, or Switzerland, we rely on appropriate safeguards recognized under applicable law, such as Standard Contractual Clauses, adequacy decisions, or other approved transfer mechanisms.

Depending on your location and applicable law, you may have some or all of the following rights regarding your personal information:

• Right to Access — request a copy of the personal information we hold about you;

• Right to Correction — request correction of inaccurate or incomplete information;

• Right to Deletion — request deletion of your personal information, subject to certain exceptions;

• Right to Restriction — request that we limit how we process your information;

• Right to Portability — request a copy of your information in a portable format;

• Right to Object — object to certain processing, including processing based on legitimate interests;

• Right to Withdraw Consent — withdraw consent at any time where processing is based on consent; and

• Right to Non-Discrimination — we will not discriminate against you for exercising your privacy rights.

California residents may have the right to know the categories and specific pieces of personal information collected, the right to delete personal information, the right to correct inaccurate information, and the right to opt out of the sale or sharing of personal information. We do not sell or share personal information for cross-context behavioral advertising as those terms are defined under the CCPA/CPRA.

Individuals in the EEA, UK, and Switzerland may exercise the rights listed in Section 11 by contacting us using the details in Section 15. You also have the right to lodge a complaint with your local data protection authority.

To exercise any of these rights, please contact us at privacy@keensolution.com. We may need to verify your identity before responding to your request. We will respond within the timeframe required by applicable law.

We may use automated tools to help assess chargeback risk and prioritize dispute evidence. These tools support, but do not replace, human review of significant decisions affecting your account. You may contact us to request more information about, or to object to, automated processing that produces legal or similarly significant effects.

Our Services are intended for business use by adults and are not directed to children. We do not knowingly collect personal information directly from children under 13 (or the applicable age of digital consent in your jurisdiction). If we become aware that we have inadvertently collected such information, we will take steps to delete it.

Our Services may contain links to third-party websites, plug-ins, or applications, including Shopify and payment processors. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any information to them.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will post the updated Policy on this page and revise the "Effective Date" above. Where required by law, we will provide additional notice of material changes. We encourage you to review this Policy periodically.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Keen Chargeback Solution Inc.

https://keensolution.com

Email: privacy@keensolution.com

If you are located in the EEA, UK, or Switzerland and are unable to resolve a concern with us directly, you have the right to lodge a complaint with your local supervisory authority.