Privacy & data handling

Service and contact

Invoice Check is operated by Nikola Dzhunov, an independent developer based in the Netherlands. This notice describes the Shopify beta. Contact Nikola Dzhunov at ndzhunov@gmail.com about privacy or your data.

Store administrators decide which documents to use. Staff should follow their organisation’s policies and share only information needed for a review.

Information processed

• Shopify identifiers and permissions: store domain, staff ID and authenticated staff session identify which purchase orders and saved reviews you can access.
• Purchase orders and invoices: supplier and document details, SKUs, descriptions, quantities, costs, currency and totals. Extracted source text can contain personal information printed on the invoice.
• Review records: document snapshots, extracted text, file names and fingerprints, corrections, mappings, notes, checks, activity and save timestamps.
• Subscription access: Shopify store and app identifiers, whether an active app subscription exists, trial and billing-period dates, and a scheduled cancellation flag. These are checked through Shopify and held briefly in server memory; they are not saved with invoice reviews. Shopify handles plan approval and billing. The app does not receive payment card details.
• Support: your email address, message and attachments when you contact us.
• Connection information: hosting and authentication providers may process IP addresses, browser information and request metadata to operate and secure their services.

How information is used

Information authenticates staff, retrieves POs, compares values, saves reviews, checks potential duplicates within your own saved records, produces exports, supports users and protects the service.

Invoice Check does not sell invoice content, use it for advertising or send document data to an AI service. The beta adds no advertising or third-party analytics scripts.

The app requests purchase-order access, with no Shopify customer or sales-order API scopes. Imported documents may still contain personal information. Review them before importing or emailing them.

Browser processing and server storage

PDF parsing happens in your browser. Original PDF files are not uploaded or stored as files by the app. Extracted text and structured document data are sent to the server and saved automatically with the review. Keep original PDFs separately.

Review content is encrypted before storage. Summary information used to list reviews, including supplier, invoice and PO references, status, identifiers and dates, is stored separately. In-app access is restricted to the verified store and staff account. The developer administers the service and may process information as needed to operate it or answer an authorised request.

Shopify access tokens are used for the current staff session and are not saved in the beta’s database. Exported JSON includes review data and source text. Downloaded exports are under your control.

The Shopify beta does not require browser local storage for saved reviews. If you used the separate private development workspace’s optional browser invoice-identity history, clear those entries separately.

Service providers and locations

• Shopify: installation, staff authentication and purchase-order data. Privacy policy.
• Cloudflare: hosting and database storage. Privacy policy.
• Google Gmail: support correspondence. Privacy policy.

Providers operate internationally. Information may be processed outside your country, including outside the European Economic Area. The beta does not make an EU-only storage commitment.

Retention and deletion

Saved reviews remain in the active database until you delete them or the store’s removal notification is processed. Delete entries from Saved reviews. A signed Shopify uninstall or shop-redaction notification removes the store’s reviews from the active database.

A minimal record of the store domain and removal time remains to prevent old sessions from recreating removed data. It has no automatic expiry in this beta.

Recovery copies can retain earlier data after deletion. Cloudflare documents a recovery window of up to seven days on Workers Free and 30 days on Workers Paid. See database recovery documentation. Original files, exports and support emails are separate.

Support correspondence is kept while needed to respond and address related follow-up. Email us to request deletion. Legal obligations may require some records to be retained.

Your choices and requests

You can correct values, export reviews, delete saved entries and uninstall. For other access, correction or deletion requests, email ndzhunov@gmail.com. Include the store domain and enough context to locate the information. We may verify your identity or authority over a store before disclosing or deleting its information.

Depending on applicable law, you may have rights to access, correct, delete or receive a copy of personal information, restrict or object to processing, and complain to a data protection authority. Document requests may need to be coordinated with the merchant that supplied them.

Flags do not make a payment or approval decision. A person must verify the originals and decide what action to take.

Changes

Changes to the beta’s data handling will appear here with an updated date. Contact the developer if you need clarification before using the app.