Privacy Policy — InvoiceImporter

Last updated: July 11, 2026

Who we are

InvoiceImporter ("the App", "we") is operated by RapidMove (zheli527@gmail.com).

What the App does

The App imports supplier invoices you upload (CSV, PDF, or images) and creates or restocks products in your Shopify store after you review and approve each line.

Data we process

• Store data (via Shopify APIs): products, variants, inventory levels, and locations — used to match invoice lines and update inventory. We request the minimum scopes: read_products, write_products, read_inventory, write_inventory, read_locations.
• Uploaded files: invoice files you upload, stored in Azure Blob Storage and retained indefinitely unless requested to delete.
• Parsed invoice data: supplier names, line items, quantities, and costs, stored in our database to support review, matching, and audit.
• Parsing accuracy data: we record what the App's parser produced for each invoice and the corrections you make on the Review screen (re-matched, skipped, or edited lines, and column-mapping changes). We use this to measure and improve the App's parsing accuracy. It is scoped to your shop, is not shared with or sold to third parties, and is deleted with the rest of your data on uninstall.
• Third-party processing: uploaded content is sent to OpenAI (or Azure OpenAI, depending on configuration) to extract structured data. Your data is not used to train those providers' models.
• Billing: handled entirely by Shopify; we do not store payment details.

What we do NOT collect

The App does not collect end-customer personal information. Invoices may contain supplier contact details, which we store as supplier records you manage.

GDPR / data subject requests

We honor Shopify's mandatory compliance webhooks:

• customers/data_request, customers/redact — the App stores no customer PII.
• shop/redact — 48 hours after uninstall, all data for your shop is deleted.

You may request deletion at any time by contacting zheli527@gmail.com.

Data retention & security

Secrets are stored in Azure Key Vault. Data is scoped per shop and deleted on uninstall (per above). All traffic to the App is encrypted in transit via HTTPS, and the database connection is encrypted via TLS (sslmode=require). Uploaded files and stored data are encrypted at rest by Azure's platform-level storage encryption.

Changes

We may update this policy; material changes will be posted at https://invoiceimporter-web.politemushroom-968d0e55.eastus2.azurecontainerapps.io/privacy.

Contact

RapidMove — zheli527@gmail.com