AutoInvoice Privacy Policy

Last updated: June 25, 2026

AutoInvoice (“the App”, “we”, “us”) is operated by Christopher Johnston Consulting. The App generates tax-compliant PDF invoices for orders placed in a merchant’s Shopify store and emails them to the merchant’s customers. This policy explains what data we access, why, and how we protect it.

Information we access

When a merchant installs AutoInvoice, and only to provide the App’s functionality, we access:

• Order data — order number, date, line items, quantities, prices, discounts, shipping, taxes, totals, and currency.
• Customer data on the order — name, email address, and billing address. These are used solely to address and deliver the invoice.
• Store/merchant settings — the business name, address, tax registration number, and email preferences a merchant enters in the App.

How we use it

• To generate a PDF invoice for each order.
• To email that invoice to the customer (and, if enabled, BCC the merchant).
• To show the merchant a record of generated invoices inside the App.

We do not sell personal data, and we do not use it for advertising or profiling.

Third-party services

• Shopify — provides the order and customer data via its APIs and webhooks.
• Resend (resend.com) — delivers invoice emails on our behalf. The customer’s email address and the invoice PDF are transmitted to Resend for delivery.
• Render (render.com) — hosts the App and its database.

Data retention & storage

Invoice records (including the generated PDF) are stored in an access-controlled database to let merchants re-download or re-send invoices. When a customer-redaction request is received from Shopify, we erase that customer’s name, email, and stored PDF while retaining the non-personal numbered record for the merchant’s tax trail. When a merchant uninstalls the App, all of that store’s data is deleted within 48 hours via Shopify’s shop-redaction webhook.

Your rights (GDPR/CCPA)

Customers may request access to or deletion of their data through the merchant they purchased from; merchants can fulfil these via Shopify, which relays the request to us. We honour Shopify’s mandatory customers/data_request, customers/redact, and shop/redact webhooks.

Contact

Questions about this policy or your data: chris@johnstonops.com.