Undo is designed to know less.

Effective date: October 5, 2026 (Undo 2.0 candidate).

Who operates Undo

Undo is operated by OpsCopilot, 57604 Rosecrest St, New Haven, Michigan 48048, United States. Questions and privacy requests may be sent to myopscopilot@outlook.com.

Information the extension stores locally

Order date, retailer, optional order number, product name, product page URL, price, return deadline, refund details, policy notes and confirmations, actual user-reported receipts and reversals, and reminder preferences. This data is stored in Chrome extension storage on the user's device.

When data leaves the browser

Cloud sync is off by default. If a user enables it and provides a personal API key, the purchase records listed above are sent over HTTPS to the Undo service. Automatic price checks are also off by default and require explicit retailer-site access. They request product pages without sending Undo account identifiers to retailers.

Information Undo does not request

Undo does not request browsing history, inbox access, payment-account access, cookies, contacts, location, camera, or microphone access. Undo does not sell personal or shopping data.

Account and service data

The supporting service stores an email address, hashed sign-in and session tokens, hashed API keys, subscription status, and any purchase records the user chooses to sync or manually add in the web dashboard. Original purchase captures, subsequent corrections, and receipt audit history are retained until the purchase or account is deleted. Product-usage analytics is off by default and requires your opt-in. It records allowlisted action counts and two page-view kinds (Undo This and recovery history), associated with your account, a random operation identifier and server time. It never contains item names, notes, receipt amounts, API keys or message content. View records older than 90 days are pruned when new usage is written; turning analytics off removes these view records and counters without deleting your purchase or receipt history. Non-reward referral tokens and signup attribution are stored if a user uses the referral feature. Tokens expire after 30 days, the attribution cookie lasts seven days, and account-linked attribution is removed with the associated account. Payment details are handled by Stripe and are not stored by Undo. Transactional sign-in email is delivered by Resend. Cloud data is stored with infrastructure providers including Vercel and Neon.

Limited Use disclosure

Undo's use of information received from browser and Google APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. Undo uses data only to provide or improve its single purchase-protection purpose; does not use it for personalized advertising or credit decisions; does not sell it; and does not allow human access except with specific user consent for support, for security, when required by law, or in aggregate and anonymized form for internal operations.

Retention and deletion

Local records remain until the user removes them, clears local records in Settings, or uninstalls the extension. Synced records remain until the user removes the purchase or deletes the account from the dashboard or requests deletion through the contact below. Account deletion first cancels any active Stripe subscription and then removes sessions, API keys, synced purchases, deletion markers, and subscription linkage, protection evidence, receipt history, corrections and referral data from Undo's database. Minimal deletion markers are kept for removed purchases while the account exists to prevent offline sync from restoring deleted records. Cloud deletion does not erase disconnected local copies; clear the extension separately. Infrastructure backups and security/access logs may persist under provider retention settings, which must be verified before release; payment processors may retain records under their own legal obligations.

Aggregate installation analytics

Installation-link counting is disabled by default. If enabled by the operator, when a visitor uses an Add to Chrome link, Undo increments a daily aggregate counter for that link location before redirecting to the Chrome Web Store. The counter does not store an IP address, account, cookie, order, or browser identifier.

Private cards and reminders

Recovery cards are previews or downloads that include only the receipts you select, their currency and a user-reported label. Undo never publishes them for you. Corrections update future previews, not previously downloaded files. Optional reminders are currently in-app only; they do not send email, push notifications or merchant messages. Provider access/security logs may include network metadata; Undo does not add purchase content or sign-in credentials to production logs.

Security

Sign-in and API credentials are stored as one-way hashes. Data is transmitted over HTTPS in production. No method of storage is perfectly secure.

Contact

OpsCopilot
57604 Rosecrest St
New Haven, MI 48048
United States
myopscopilot@outlook.com