Recovr connects to the store you depend on for your income. We take that responsibility seriously. This page explains how we protect your account and data.
Account access
- Official eBay OAuth. Recovr connects to eBay only through eBay’s official OAuth authorization flow. We never ask for, see or store your eBay password.
- Revocable at any time. You can disconnect Recovr from inside the app or revoke access directly from your eBay account settings. Access ends immediately.
- Least privilege. We request only the permissions needed to read disputes and related order data and, with your approval, respond to cases.
You approve what gets sent
By default, Recovr drafts responses and waits for your approval before submitting anything to eBay. Automated responses only happen if you explicitly enable auto-respond rules, and you can turn them off at any time.
Data protection
- All data is encrypted in transit (TLS) and encrypted at rest.
- OAuth tokens are stored encrypted and are never exposed to the browser.
- Access to production systems is restricted to the staff who need it to operate the service.
- When you close your account, we delete your data as described in our Privacy Policy.
Payments
We don’t store full card numbers. Payments are handled by our payment processor.
Reporting a vulnerability
If you believe you’ve found a security issue in Recovr, please report it through our contact form and start your message with “Security”. Include enough detail for us to reproduce the issue. Please give us a reasonable amount of time to fix it before disclosing it publicly, and don’t access or modify other users’ data while testing. We’ll acknowledge your report and keep you updated as we work on a fix.