Inkslip privacy policy

What this policy covers

Inkslip is a Shopify app that prints invoices, packing slips and quotes from your Shopify admin, and, if you turn it on, lets your customers download their own invoices. Documents are web pages your browser prints to PDF; Inkslip sends no email. This policy describes what data the app reads from your store, what it keeps, who else handles it, and how to have it deleted.

The app sets no cookies on your storefront or in your customers' accounts, and has no analytics or tracking of any kind.

What the app reads from your store

Through Shopify's Admin API, with the access you grant when you install it, the app reads what the documents you print show:

• the order: its number and dates, its line items (titles, variants, SKUs, quantities, prices, taxes and discounts), shipping, duties, fees, refunds, totals and the currency it was paid in;
• the customer's name and their billing and shipping addresses;
• the customer's phone number, only if you choose to show it on a document;
• a business customer's company and VAT number, from their B2B company location or an order attribute you name;
• product images, only if you choose to show them;
• for quotes, your draft orders, with the same details and their checkout link;
• your store's name, address and time zone.

When a customer asks to download an invoice, the app also reads the order's customer id, payment status and confirmation number, to check that the order is theirs and that your download settings allow it.

What the app stores

The app keeps the following in its own database:

• Your store's myshopify.com domain, and the offline access token Shopify issues so the app can act on your store.
• Your settings: your legal business details, number formats, logo, colour and font, document options, wording, custom CSS and customer download settings.
• For each invoice and quote issued, the order's or draft order's id, its number and the date it was issued (for a quote, also the date it's valid until): your numbering record, so a reprint always carries the same number.
• For each document issued, its type, the order's id and the month it was first issued: how the app counts your 50 free documents a month.
• Which plan your store is on.

The app also writes each invoice's number and date to its order, and the highest numbers issued to your store, as Shopify metafields. They're part of your Shopify records, so numbering can carry on if you reinstall.

What the app never stores

Customer names, email addresses, phone numbers, billing and shipping addresses, customer ids and orders' confirmation numbers are never written to the app's database or its logs. They're read to print a document or check a download, and discarded when the request completes. The app never reads customers' email addresses at all.

The app does not sell or share data, and does not use it for advertising, marketing, analytics or profiling.

Why the app uses this data

Solely to print the documents you ask for, to keep your invoices and quotes numbered, to preview your settings, to count your documents for your plan, and, if you allow it, to give your customers their own invoices. There is no other use.

Who else handles this data

Two providers process data on the app's behalf:

• Shopify: the platform your store runs on. All order data comes from there, the app reads it through Shopify's Admin API, and Shopify bills you for the app.
• Cloudflare: hosts the app and its database. Data is encrypted in transit (HTTPS) and at rest.

No other third party receives data from the app.

How long data is kept

While the app is installed, your settings and your numbering record are kept, since an invoice must keep its number for as long as you might reprint it.

When you uninstall the app, Shopify tells it and the app immediately deletes everything it holds for your store: the access token, your settings, your numbering record and your document counts. 48 hours after you uninstall, Shopify also sends the app a shop/redact request, and the app runs the same deletion again, so nothing is left behind. The invoice numbers written to your orders stay in your Shopify records for as long as Shopify keeps them. Before you uninstall, you can export your settings, with your last invoice number, from the app's Settings page.

How data is protected

All traffic between browsers, Shopify and the app uses HTTPS, and the database is encrypted at rest by the hosting provider. The access token is only ever used on the server and never sent to a browser. The links customers download invoices from are signed, work for one order only and stop working after half an hour. Access to the production database is limited to the app's operator.

Your rights and how to request deletion

You can ask at any time for a copy of the data the app holds for your store, or for it to be deleted. Email info@andrewtechful.com from your store's owner or staff address so the request can be verified; we aim to answer within one business day and to complete a deletion within 30 days. Uninstalling the app also deletes it, as described above.

If one of your customers asks you for their data or for its erasure, Shopify forwards the request to the app (the customers/data_request and customers/redact webhooks). Since the app stores no customer personal data, there is nothing to return or delete on its side; your own Shopify records remain the source.

Depending on where you and your customers are, you may have legal rights, for example under the GDPR or the CCPA, to access, correct, delete or restrict the use of personal data. Contact us to exercise them.

Changes to this policy

This policy took effect on September 28, 2026. If it changes, the new version is published at this address with a new effective date.

Contact

Questions about this policy, or a deletion request: info@andrewtechful.com