Privacy Policy

Who we are

Send Invoice ("the app") is a Shopify application operated by Emet LLP ("we", "us"), that generates and delivers invoices for a merchant's orders. The merchant is the data controller of their store's data; Emet LLP acts as a data processor / service provider, processing that data only on the merchant's behalf and instructions.

Data we process

When a merchant installs and uses the app, we access the following from their connected Shopify store through the Shopify Admin API:

• Order data — order numbers, line items, quantities, totals, taxes, discounts, and payment/fulfillment status, used to build invoices.
• Protected customer data — the customer's name, email address, phone number, and billing/shipping address associated with an order. Addresses are read solely to print the "Bill to" and "Ship to" blocks on the order documents the merchant generates (invoices, receipts, packing slips). We do not read any other customer fields.
• Store & account data — the shop domain and the Shopify access token needed to call the API on the merchant's behalf.

How we use it

Customer and order data is used only to: render invoice previews and PDF invoices, address and deliver invoices to the correct recipient, maintain a delivery history, and send invoice notifications through the channel the merchant configures (email, and optionally Slack or Basecamp). We do not sell, rent, or share personal data, and we do not use it for advertising, profiling, or automated decision-making.

Google user data

Google Drive archiving is an optional feature a merchant can enable. If they connect their Google account, we request the drive.file scope only — the narrowest Drive scope available, which grants access solely to the files and folders our app creates or the merchant explicitly picks. We use it for one purpose: to write a copy of the merchant's own generated invoice PDFs into the Drive folder they choose. We never read, list, or modify any other file in their Drive.

Google user data is not sold, transferred for advertising, used to train generalized AI/ML models, or shared with third parties, except as needed to provide this feature or as required by law. A merchant can disconnect Google Drive at any time from the app's delivery settings, or revoke access at myaccount.google.com/permissions; we then delete the stored OAuth tokens. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Sub-processors

We share data only with the infrastructure and delivery providers needed to run the service:

• Render — application hosting and managed database (data encrypted at rest).
• Postmark — transactional email delivery for the documents we send on the merchant's behalf.
• Delivery channels the merchant chooses — Google Drive, Slack, or Basecamp, only if the merchant connects them.

Retention

Synced orders and their customer data are retained only as long as needed and are automatically deleted after 90 days. When a merchant uninstalls the app, all of their store's data is scheduled for deletion. We also honor Shopify's mandatory compliance requests to erase customer or shop data.

Security

All traffic is encrypted in transit using HTTPS/TLS. Shopify access tokens are encrypted at rest with AES-256-GCM, and the database is encrypted at rest by our hosting provider. We follow data minimization — we request only the scopes and fields required to produce invoices — and API tokens are never exposed to the browser.

Your rights & data requests

Customers may exercise data-subject rights (access, deletion) through the merchant they purchased from. Send Invoice implements Shopify's mandatory compliance webhooks — customers/data_request, customers/redact, and shop/redact — to return or delete a customer's stored data on request.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected here with an updated "last updated" date.

Contact

For privacy questions or deletion requests, contact joysolution03@gmail.com.