Privacy Policy — Compliant PDF Invoices

Last updated: 2026-10-11

Compliant PDF Invoices (“the app”) is a Shopify app operated by EarnToLink (언투링크), a sole proprietorship registered in the Republic of Korea. This policy explains what the app collects when a merchant installs it, how it is used and how it is deleted.

Information the app stores

• Your shop domain and the access token Shopify issues at install (to call the Shopify API on your behalf).
• Your invoice settings: legal name, business address, VAT / registration numbers, contact email and phone, template, language, numbering rules and footer text.
• For every issued invoice or credit note: the Shopify order ID and order number (e.g. #1001), refund ID for credit notes, the invoice number, issue date, currency and the net, tax and gross totals — so numbers are never reused.
• A random key used to sign the customer download links you paste into notification emails.
• An activity log of issued documents, downloads, settings changes and errors.

Information the app reads but does not keep

• Orders: line items, prices, discounts, tax lines, shipping, refunds, billing name and address, VAT ID attributes — read when an invoice is shown or downloaded and used only to draw the document. Buyer names and addresses are never stored.
• Shop name, address, currency and time zone.

Your customers’ personal data

The app does not store personal data of your customers.

How the information is used

Only to provide the app’s features to you. We do not sell data, do not use it for advertising, and do not use it to train AI models.

Where it is stored

On Cloudflare (Workers and D1 database) in Cloudflare’s global network. Data is encrypted in transit (HTTPS) and at rest (Cloudflare D1 storage encryption). Billing is handled by Shopify; the app never sees payment card details.

Retention and deletion

• Invoice number records are kept while the app is installed because tax law requires gapless numbering; they contain no customer names or addresses.
• Everything is deleted on shop/redact (48 hours after uninstall).

When you uninstall the app, we stop accessing your store. Shopify then sends a shop/redact request and we delete all data of your shop. You can ask for deletion at any time by email.

Your rights

You (and your customers, through you) can request access, correction or deletion of personal data. Requests that come through Shopify’s customers/data_request are answered within 30 days.

Terms and data processing

Use of the app is governed by our Terms of Service and Data Processing Addendum, which form the data protection agreement between you (the merchant, as controller) and us (as processor).

Contact

EarnToLink — help@earntolink.com