Privacy Policy
This policy explains how Yu Dev Lab ("we") handles personal data in the Shopify app "Invoice & Receipt PDF (適格請求書・領収書PDF)" (the "App") and on this website.
1. Data we collect
| Whose | Data | Source |
|---|---|---|
| Merchants | Store domain and name, contact email, app settings (issuer name, address, tax registration number) | Shopify (installation, settings screen) |
| Merchants' customers | Order number and date, purchased items, amounts and taxes, name, billing address, email address | Shopify order data, within the scopes the merchant grants |
| Website visitors | Standard access logs (IP address, browser, timestamp) | Hosting provider logs |
2. Purposes
- To generate receipts, qualified invoices and delivery notes as PDF for the merchant and its customers (name and address are printed as the recipient)
- To verify a customer's identity by order number and email when the customer self-issues a receipt
- To operate, debug and support the App
- To bill for the App through Shopify's billing system
We do not use personal data for marketing or advertising, and we never sell it.
3. Retention
- Issued-document records (document number, date, amounts, tax breakdown, recipient, note) are kept while the App is installed. Merchants can export them at any time.
- When we receive Shopify's
shop/redactrequest after uninstallation, we delete all data of that store, keeping only the store ID and issue counts required for billing history. - On a
customers/redactrequest we replace the customer's name, address and email in issued-document records with "[deleted]". - The legal duty to retain copies of qualified invoices lies with the issuing merchant. The App is not a long-term archive.
4. Security
- Names, addresses and email addresses are encrypted at rest (AES-256-GCM); all traffic uses TLS.
- Backups are encrypted; test and production environments are separated.
- Access to personal data is logged (retained one year) and limited to the developer.
- We notify affected merchants promptly in the event of a security incident (see Security & Incident Response).
5. Sub-processors
We do not share personal data with third parties except the following processors.
| Provider | Purpose | Location |
|---|---|---|
| Fly.io | Application server and database | Tokyo region (US company) |
| Cloudflare | Encrypted backups, hosting of this website | US company |
| Shopify | App distribution, billing, source of order data | Canada |
6. Your rights
Merchants can export and delete data from the App's admin screens. Customers may request access, correction or deletion through the merchant or by contacting us directly. We respond to Shopify's customers/data_request within 30 days.
7. Cookies
The App uses only the session data required for authentication inside the Shopify admin. This website does not use cookies.
8. Changes
Updates are published on this page; material changes are also announced in the App and by email to the registered address.
9. Contact
Yu Dev Lab (ゆう開発室)
Email: yudevlabcom@gmail.com
Support