Secure & encrypted
You trust us with your orders and your customers' data. We take that seriously. From installing through Shopify to encryption at rest and an EU hosted database: security is built into the foundation of Marketplace Invoice.
Our measures
How we protect your data
Install from the Shopify App Store
You install the app from the Shopify App Store, inside your own Shopify admin. You never type a password on our site, so we never see your Shopify password either.
Access you can revoke yourself
Shopify grants the app only the access it needs to invoice: your orders and the customer details that belong on the invoice. You see that access when you install, and you revoke it by uninstalling the app.
AES-256-GCM encryption at rest
Your store's access tokens and the customer data on your invoices are stored encrypted with AES-256-GCM, the standard used in the financial sector too. Without the right keys that data is unreadable.
Encrypted connections
All traffic to and from Marketplace Invoice runs over encrypted HTTPS connections. Traffic with Shopify is encrypted in transit too, so data cannot be intercepted.
EU hosted database
Your data sits in a database hosted in the European Union. That keeps your orders and invoices inside the EU and fits the GDPR.
Erasure on request
We receive the privacy webhooks Shopify sends for the GDPR. When a store or a customer asks for erasure, we delete that store's data within the period Shopify sets for it.
Data minimisation and retention periods
We collect only what is needed to create your invoices, attach them to the order and email them to your customer. We keep personal data no longer than necessary and delete it by default after 180 days, unless a legal retention obligation requires otherwise.
Isolated environment per store
Every store has a logically isolated environment. Your orders, invoices and settings are strictly separated from those of other stores. No one can reach your data and you cannot reach anyone else's.
Backups
Your records are backed up securely on a regular basis, so your invoices and data are preserved in the event of unexpected outages. Recovery is part of our procedures.
No selling or sharing of data
We do not sell your data and we do not share it with third parties for marketing. We use it only to create and send the invoices you installed the app for.
Transparent
Your data, your control
You decide what happens with your data. You can export your invoices at any time, uninstall the app and ask us to erase your store's data. We process only what is necessary, and we do so in line with the GDPR.
- View and export your invoices at any time as PDF or UBL.
- Uninstall the app in your Shopify admin and our access to your store ends right away.
- Ask us to erase your store's data and we delete it.
- Insight into which data we process about you, in line with the GDPR.
Frequently asked questions
About security
How does the app get access to my store?+
You install Marketplace Invoice from the Shopify App Store. Shopify shows you which access the app asks for and then grants the app its own access token for your store. You type no password with us and we never see your Shopify password.
Which data does the app see?+
Only what is needed to invoice: your orders and the customer details that belong on the invoice, such as name, address and VAT number. We store the access token and that customer data encrypted with AES-256-GCM, in a database in the EU.
What happens when I uninstall the app?+
Shopify revokes the access and we can no longer read anything from your store. Shopify then sends us a privacy webhook, and on request we erase your store's data completely.
How long do you keep my data?+
No longer than necessary. We delete personal data by default after 180 days, unless a legal retention obligation (such as for bookkeeping) requires a longer period.
Can another store access my data?+
No. Every store sits in a logically separated environment with strict data isolation. Your orders, invoices and settings are accessible to you alone.
Start with peace of mind
Encrypted, isolated and respectful of your data. Install the app in your Shopify store and leave the invoicing to us.
Install on Shopify