AI Winback Autopilot — an app published by Orbestra.
Effective date: July 13, 2026 · Last updated: July 13, 2026
AI Winback Autopilot (the "App") is a Shopify application operated by Orbestra ("we", "us", "our"). The App helps a Shopify merchant (the "Merchant") identify customers who have stopped purchasing and send them personalized win-back emails.
For personal data belonging to a Merchant's own customers, the Merchant is the data controller and we act as a data processor on their behalf. For data about the Merchant's own account and store, we act as controller. If you are a shopper and want your data changed or deleted, contact the store you purchased from; they can action it through us.
Contact for privacy questions: support@orbestra.com
When a Merchant installs the App, with their authorization we access the following through the Shopify API:
| Category | Examples | Why |
|---|---|---|
| Store & account | Store domain, plan, currency, app settings | Run the App, billing, configuration |
| Customer records | Email address, first name, marketing-consent status | Detect dormant customers and contact only those who opted in |
| Order history | Order dates, counts, amounts, purchased products (up to 24 months) | Learn each customer's re-purchase rhythm and attribute recovered revenue |
| Product catalog | Product titles and images | Infer the store's brand voice and personalize emails |
We do not access or store payment card numbers, passwords, or full checkout payment details. We do not sell personal data.
Where we process a Merchant's customer data, we do so under the Merchant's instructions as their processor; the Merchant is responsible for establishing the lawful basis (typically the customer's marketing consent) for that processing. For our own processing of Merchant account data, our legal basis is performance of our contract with the Merchant and our legitimate interest in operating and securing the App.
We share the minimum data necessary with the following service providers to run the App:
| Provider | Purpose | Data shared |
|---|---|---|
| Shopify | Platform and data source | Access to store, customer, order and product data |
| Anthropic (Claude) | Generate email copy with AI | Limited context such as a customer's first name and purchased-product details. Data sent to the Anthropic API is not used to train their models. |
| Resend | Deliver win-back emails | Recipient email address and message content |
| Railway | Application hosting and database | All App data at rest |
| ImprovMX | Forward support email | Emails sent to our support address |
customers/data_request,
customers/redact, and shop/redact.Depending on your location (including under the GDPR and the CCPA/CPRA), you may have the right to access, correct, delete, or restrict the processing of your personal data, and to opt out of marketing. Shoppers should contact the store they purchased from; that Merchant can action the request through the App. Merchants and anyone else may contact us directly at support@orbestra.com.
Data is encrypted in transit. Access is restricted and authenticated, and we avoid writing personal data to application logs. No method of transmission or storage is perfectly secure, but we take reasonable measures appropriate to the sensitivity of the data.
Our providers may process data in countries other than yours, including the United States. Where required, appropriate safeguards (such as Standard Contractual Clauses) apply.
The App is not directed to children and we do not knowingly collect data from them.
We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above.
Operator / data controller: Orbestra, the United States.
Email: support@orbestra.com
Governing law: the laws of the United States.