Privacy

Beta policy draft dated September 24, 2026. The final legal entity, product name, support email, and jurisdiction will be filled before public App Store submission.

Data we process

The app reads native Shopify Purchase Orders needed to provide PO exports and supplier workflows. It stores only app-owned configuration and workflow data such as supplier export formats, PO snapshots used for supplier invitations, supplier responses, audit events, and app analytics events.

What we do not need

The current product does not require Shopify customer or order data, payment-card data, or protected health information. It does not sell merchant or supplier data.

Supplier links

Supplier invitation tokens are generated with cryptographic randomness. The database stores a one-way hash of the token rather than the token itself. Links can expire or be revoked. Supplier responses are retained as audit records until the merchant removes app data or Shopify's required shop-redaction process applies.

Beta signup

The public beta form stores the email address and optional store, role, and workflow notes submitted by the visitor. These are used to conduct product research and beta onboarding.

PDF conversion

The free PDF converter is designed to parse files deterministically without sending documents to external AI providers. Uploaded files are processed only for the conversion request and are not intentionally persisted by the application.

Shopify privacy requests

The app implements Shopify's mandatory compliance webhooks. The current scope does not store Shopify customer records. When Shopify sends a shop-redaction request, app-owned data keyed to that shop is deleted.

Security

Controls include tenant-scoped database queries, hashed share tokens, expiry and revocation, spreadsheet formula-injection protection, authenticated Shopify admin routes, response throttling, and audit logging. No security control eliminates all risk.

Contact

During private beta, use the support form. A dedicated support address and legal entity details will be published before App Store submission.