Privacy policy

Who we are

The Shopify app Fatturazione-Italia is published by aoex (https://aoex.be/, contact@aoex.be). For personal data of a shop's customers, the merchant is the controller and aoex is the processor under Article 28 of Regulation (EU) 2016/679 (GDPR), under the agreement the merchant accepts in the app. For the merchant's own account and settings, aoex is the controller.

Data we process

We process only what is needed to issue an Italian electronic invoice and to run the app.

• Shop data: the myshopify.com domain, the tax settings the merchant enters (company name or first and last name, VAT number, tax code, address, tax regime) and the session that keeps the merchant signed in.
• Order data, only for orders that need an invoice: we read the order from Shopify, including the customer name, email address, billing address, and the tax data required for FatturaPA (tax code, VAT number, SDI recipient code and PEC). We store, encrypted, the name or company name, the billing address, those tax identifiers, the PEC when the customer provided one, and the invoice lines. The order email is received with the order and is not stored as its own field.
• We do not sell personal data. We do not use it for advertising, profiling or analytics.

Purpose and legal basis

The purpose is to create the FatturaPA file, send it to the Sistema di Interscambio (SDI) through an accredited intermediary, and show its status to the merchant. The legal basis is the contract with the merchant (Article 6(1)(b) GDPR) and the legal duty to issue an invoice (Article 6(1)(c) GDPR).

Sub-processors

We will tell merchants before we add another sub-processor.

• Fly.io — hosting of the application, the database and backups, in Frankfurt, in the European Union.
• Invoicetronic — accredited intermediary that transmits the invoice to the SDI. The SDI (Agenzia delle Entrate) receives the invoice because Italian law requires it.

Security

Personal data in the database is encrypted at rest with AES-256-GCM. Traffic is encrypted in transit (HTTPS). Logical backups are encrypted with AES-256 and stored in the European Union: daily copies are kept for 35 days and monthly copies for 12 months. Snapshots of the database volume are kept for 14 days. Technical logs do not contain customer names, email addresses or postal addresses.

How we handle a security incident is described at /incidenti. How we prevent and handle data loss is described at /perdita-dati. We tell affected merchants without undue delay and within 48 hours of discovery.

How long we keep data

This is what the application does today.

• While the app is installed, numbered invoices stay in the app. Italian law requires the merchant to keep invoices for 10 years. That legal archive (conservazione a norma) is the merchant's duty, through the free service of the Agenzia delle Entrate or their intermediary. We do not replace that archive.
• On uninstall, sessions are deleted at once and the shop is marked uninstalled. Invoices are not deleted at that moment.
• Shopify then sends shop/redact (about 48 hours after uninstall). We delete the shop. Invoices, including numbered ones, numbering sequences and transmission events are deleted with it, and any remaining sessions are deleted. If the shop is a founding member, we keep only the shop domain so that status can be restored on reinstall. That record has no customer data. The free legacy allowance is a flag and a date on the shop row, not a separate list of domains: uninstall keeps it, shop/redact deletes it with the shop. We store the plan name and a cache of the Shopify subscription status. Shopify bills the card; we do not store card numbers. Audit entries, which do not contain a customer name, email or address, are not deleted with the shop.
• customers/redact deletes draft invoices of the listed orders only when they were never given a number and never sent. A numbered or sent invoice is a tax document and is not deleted on that request (Article 17(3)(b) GDPR). It is deleted later only if the whole shop is deleted.
• customers/data_request: we store the shop domain and the order identifiers (no customer name or email). The merchant downloads a JSON file of those documents, including the XML, in the app and gives it to the customer.

Your rights

You can ask for access, rectification, erasure, restriction, portability or to object. Customers of a shop exercise these rights with the merchant. Shopify forwards data requests and redaction to the app, and we handle them as described above. Merchants can write to contact@aoex.be. You may also complain to a supervisory authority: in Italy the Garante per la protezione dei dati personali, in Belgium the APD/GBA.

Cookies

The embedded app signs the merchant in with Shopify session tokens, not with cookies. It does not set tracking or advertising cookies, and it does not use analytics trackers.