Simple Invoice — Privacy Policy

Last updated: 2 September 2026

Simple Invoice ("the app") generates PDF invoices for Shopify orders on behalf of the merchants who install it. This policy explains what personal data the app processes and why.

What we process, and why

For each order in a merchant's store, the app stores the data needed to produce an invoice, and nothing else:

Customer name and billing/shipping address — printed on the invoice as the billing/shipping party.
Customer email address — printed on the invoice, and used to send the invoice PDF to the customer when the merchant has enabled auto-email.
Order details — order number, date, line items, quantities, prices, taxes, discounts, and totals.

The app requests only the read_orders Shopify scope. It does not request access to the merchant's customer list (read_customers), does not collect phone numbers, payment details, or browsing data, and does not use tracking or analytics on personal data.

What we do not do

We do not sell or rent personal data — to anyone, ever.
We do not use personal data for advertising, profiling, or automated decision-making.
We do not share personal data with third parties, other than the subprocessors listed below.

Subprocessors

We use two subprocessors. No others receive personal data.

Subprocessor	Purpose	Data received	Location
Fly.io	Application hosting and database storage	All data listed above	Frankfurt, Germany (`fra`)
Resend	Invoice email delivery — only when the merchant turns on auto-email	Recipient email address and the invoice PDF	United States

If a merchant leaves auto-email off, no personal data reaches Resend at all. We will give notice before adding or replacing a subprocessor.

Storage and security

Data is encrypted in transit (TLS) and at rest (encrypted volumes).
Access to production systems is limited to the app operator and protected by strong authentication.
Every access to personal data within the app (viewing invoices, rendering a PDF, sending an email) is recorded in an access log.

Retention and deletion

Invoices are kept for 7 years (84 months) by default, then deleted automatically. Seven years is the retention period most EU and US tax authorities require for financial records. Merchants can change this in the app's settings, within a floor of 12 months and a ceiling of 20 years, to match their own obligations. The purge runs on its own — no merchant action is needed.
When Shopify sends a customer redaction request (customers/redact), we remove the customer's contact details from the affected invoices. Invoice billing records themselves are retained as financial records (GDPR Art. 17(3)(b)) until the retention period above expires.
When a merchant uninstalls the app, Shopify sends a shop redaction request (shop/redact) 48 hours later, and we delete all data held for that shop: invoices, settings, data requests, and access logs.

Customer data requests

When Shopify sends a customer data request (customers/data_request), the merchant — not us — is the data controller and owns the response. We record the request and show it to the merchant in the app, where they can download a JSON export of every invoice we hold for that customer and pass it on. GDPR allows 30 days.

The export is assembled at download time from current records rather than stored as a snapshot, so a redaction that arrives in the meantime is reflected in whatever is handed over. We never keep a second copy of customer data.

Contact

Questions or data requests: contact the developer via the app's support email listed on the Shopify App Store listing.