Privacy Policy

Billsora · Last updated: June 17, 2026

This Privacy Policy describes how Billsora (“the App”, “we”, “us”) collects, uses, and protects information when a merchant installs and uses the App on their Shopify store. By installing or using Billsora, you agree to the practices described below.

1. Who We Are

Billsora is a Shopify application that helps merchants generate, customize, and manage invoices for their store’s orders. The App is embedded within the Shopify Admin and operates using data made available through the Shopify APIs.

2. Information We Collect

When you install and use Billsora, we may access and process the following information:

Store information: your store domain, store name, email, currency, timezone, and basic configuration.
Order information: order numbers, line items, totals, taxes, discounts, shipping, and fulfillment status.
Customer information (Protected Customer Data): customer name, email address, phone number, and billing/shipping addresses, as contained in your orders.
App data: invoice templates, branding, and generated invoices you create within the App.

We only access this data to provide the App’s core functionality.

3. How We Use Information

To generate, format, and manage invoices for your orders.
To store and apply your invoice templates and branding settings.
To authenticate your store and keep your session secure.
To deliver invoices (for example, by email) when you request it.

We do not sell, rent, or share your data or your customers’ data for advertising or marketing purposes.

4. Data Storage and Security

Data is stored in a managed PostgreSQL database (hosted by Supabase) and the App is hosted on Vercel. All data is transmitted over encrypted connections (HTTPS/TLS) and stored on infrastructure that employs encryption at rest. Access to data is restricted to the App’s operation and protected by access keys.

5. Data Sharing and Third Parties

We share data only with the service providers necessary to operate the App:

Shopify — the platform the App runs on and the source of store/order data.
Supabase — database hosting.
Vercel — application hosting.

These providers process data solely to provide their services and are bound by their own privacy and security commitments.

6. Data Retention

We retain data only as long as the App is installed and necessary to provide its functionality. When you uninstall the App, your store’s data is deleted in accordance with Shopify’s mandatory data-deletion (shop/redact) webhook, typically within 48 hours of uninstall.

7. Your Rights (GDPR & Customer Privacy)

Billsora supports Shopify’s mandatory compliance webhooks for customer privacy:

Customer data request — we respond to requests for the data we hold about a customer.
Customer redaction — we delete a customer’s personal data on request.
Shop redaction — we delete a store’s data after the App is uninstalled.

Merchants and their customers may request access to, correction of, or deletion of their personal data by contacting us at the address below. Requests submitted through Shopify are handled automatically.

8. Cookies and Sessions

Billsora uses only the cookies and session tokens required to authenticate your store and keep you securely signed in while using the App. We do not use tracking or advertising cookies.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last updated” date. Continued use of the App after changes constitutes acceptance of the revised policy.

10. Contact Us

If you have any questions about this Privacy Policy or how your data is handled, contact us at:

Email: billsora.dev@gmail.com