This Privacy Policy explains how Invoice Pilot ("the App", "we", "us", or "our") collects, uses, and protects information when you install and use our application on your Shopify store. By installing or using the App, you agree to the practices described in this policy.
1. Information We Collect
When you install the App on your Shopify store, we receive and process the following information through the Shopify API, strictly as needed to provide our invoicing features:
- Store information: your shop domain, store name, email address, currency, and timezone.
- Order data: order numbers, line items, prices, taxes, discounts, and fulfillment details used to generate invoices, packing slips, and return forms.
- Customer data: the name, billing/shipping address, and email address associated with an order, used solely to populate invoice documents and, where you enable it, to send invoices by email.
- App settings: the templates, branding, and configuration you choose within the App.
2. How We Use Your Information
We use the information we collect only to:
- Generate, customize, and deliver invoices, packing slips, and return forms;
- Send invoice emails to your customers when you enable automatic or manual email sending;
- Provide, maintain, and improve the App's features and customer support;
- Manage your subscription plan and usage limits.
We do not sell your data or your customers' data, and we do not use it for advertising.
3. Data Sharing
We do not share your information with third parties except:
- Service providers that help us operate the App (such as hosting and email delivery providers), bound by confidentiality obligations and used only to deliver the App's functionality;
- When required by law, to comply with a legal obligation, court order, or governmental request.
4. Data Retention
We retain store and order data only for as long as the App is installed and as needed to provide our services. When you uninstall the App, we honor Shopify's mandatory data-redaction webhooks and remove or anonymize your data in accordance with Shopify's requirements, typically within 48 hours of the redaction request, unless we are required to retain it by law.
5. Data Security
We use industry-standard technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
6. Your Rights
Depending on your jurisdiction, you and your customers may have the right to access, correct, or request deletion of personal data we hold. Shopify merchants and their customers can exercise these rights through Shopify's data-request and redaction processes, which we support. You may also contact us directly using the details below.
7. GDPR & Shopify Compliance
We comply with Shopify's mandatory privacy webhooks (customers/data_request, customers/redact, and shop/redact) to support data-access and data-deletion requests from merchants and their customers.
8. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above. Your continued use of the App after changes take effect constitutes acceptance of the revised policy.
9. Contact Us
If you have questions or requests regarding this Privacy Policy or your data, please contact us at support@samyecom.com.