Steelyard PDF Invoices privacy policy

Effective November 7, 2026 · Steelyard Ventures LLC

We process store and order information to create the invoices and packing slips merchants request. We do not sell personal information or use customer information for advertising.

Information we use

Store identity and Shopify authorization tokens; merchant branding settings and uploaded logo; selected order numbers, dates, products, quantities, recorded prices, discounts, shipping, taxes, refunds, financial status, and billing/shipping names and addresses. We do not request customer email addresses or phone numbers. Information in optional merchant-entered branding may also appear in PDFs.

Storage and retention

Creating a document saves an order and branding snapshot so that later downloads stay consistent. Snapshots are retained for up to 90 days; expired snapshots become unavailable and are removed during access or the daily cleanup while the service is running. Preview does not save an order snapshot. Branding and authorization records remain until uninstall or deletion. Shopify compliance requests are retained until fulfilled or the store is removed. Security access logs record the action, time, and keyed hashes of the store and staff account for up to 30 days, with daily cleanup. They do not contain invoice contents. Encrypted disaster-recovery snapshots may retain deleted records for up to seven additional days, are not used for ordinary access, and must pass deletion checks before restoration. Merchants control copies they download and should keep their own copies for permanent records.

Sharing and security

Shopify provides order access and handles app subscriptions. Fly.io hosts our application and encrypted persistent storage in the United States. These service providers process information needed to operate the service. We encrypt connections, limit access to authorized operators, use authenticated store-specific requests, and do not publish document download links. We may disclose information when legally required.

Your choices

Merchants can replace or remove their logo, change settings, download retained documents, and uninstall the app. Uninstall removes app-held store records when Shopify delivers the uninstall event. Shopify’s shop-redaction event also triggers deletion. Customer access and deletion requests are processed through Shopify’s privacy workflow; merchants can export requested data in the app and mark it delivered. Contact us for assistance or unresolved requests.

Contact

operations@steelyardventures.com · Steelyard Ventures LLC

We will update this page when our practices change. Help and support