Privacy policy

This policy explains what data 2refund collects, why, who processes it, and what control you have over it. 2refund is in a pre-launch period and this policy will be reviewed before general availability, but it already reflects how the Service handles your data today. The short version: we collect what is needed to pursue your refund, we never sell it, and you can have it deleted.

1. What we collect

• Account data: your name, email and authentication identifiers, provided through Google sign-in or email registration.
• Claim data: what you tell us when you open a claim — the platform and the problem, booking references and dates, amounts, how you paid, and the evidence files you choose to upload.
• Generated documents: the letters and replies produced for your case, and the platform terms that applied on your booking date (stored so nobody can move the goalposts later).
• Payment data: handled by Paddle, our payment provider and merchant of record. We receive your plan and billing status, never your card number.
• Technical data: essential cookies and, only if you accept them in the banner, analytics events.
• What’s inside your uploads: the screenshots and documents you choose to attach can incidentally contain extra personal data — names of staff or other guests, contact details, signatures, or fragments of booking and card numbers. Providing any of this is entirely optional, and you can redact or leave out anything you’d rather not share. We do not pull this content out into structured fields or build profiles from it: it stays inside the file you uploaded, read solely to support your own claim, and is deleted with the rest of your data when you ask.

2. How we use it

To prepare and follow up on your refund request, to track stages and deadlines and keep you updated, to operate your subscription, to answer support requests, and to maintain public statistics on refunds recovered — always in aggregated form that does not identify you. We do not sell your data and we do not use it for third-party advertising.

3. AI processing

Your letters are drafted by an AI model. To generate them, the relevant claim details are sent to our AI provider, which processes them on our behalf to produce the document and does not use them to train its models. The same applies to the AI chat on paid plans.

4. Who else sees your data

Only the service providers we need to run 2refund: Google Firebase (hosting, authentication and database), Paddle (payments) and our AI provider (letter generation), each processing data under their own contractual obligations to us. Beyond that, we disclose data only if the law requires it. We never sell it — full stop.

5. How long we keep it

Your claims and documents are kept while your account is active so you can return to an ongoing case — closed claims stay in your account as a read-only record. If you ask us to delete your data or your whole account, it is purged from our systems within 30 days, except where billing records must be retained for tax and accounting law.

6. Cookies

Essential cookies keep the site working (sign-in, security). Analytics cookies are set only if you accept them in the cookie banner; you can change your mind at any time by clearing the choice in your browser.

7. Your rights

You can access and correct your data in the app, and request a copy or full deletion of your data by writing to [email protected]. Depending on where you live, you may also have statutory rights (such as those under the GDPR) to restrict or object to processing and to lodge a complaint with your data-protection authority.

8. Changes and contact

If this policy changes materially, we will notify registered users before the change takes effect. Questions about your data: [email protected]. See also our Terms of service and Refund policy.