Tarifo: Commercial Invoices helps Shopify merchants create commercial invoices, proforma invoices and CN23 customs declarations from their orders and returns, check which international orders are missing customs data before they ship, and export a customs manifest for their carrier. On the Pro plan it can also check, tag and document new orders automatically and email the documents.
Tarifo: Commercial Invoices is operated by StoreFleet ("we", "us"), a trading name of Jose James, LLC, 131 Continental Dr, Suite 305, Newark, DE 19713, USA. We are responsible for the data the app's server and our support service process, as described below. For any question or request about this policy or your data, email [email protected].
Your app data, such as the interface language, your sender details and registration numbers (EORI, VAT, IOSS), your document settings, the document number counter and the customs descriptions you enter for your products, is stored in your own Shopify store as app-owned metafields on your shop, products and product variants. It is not stored on the app's server; when you print from the Print menu of your Shopify admin, the server reads it only while it creates that PDF.
The app's server stores your shop domain, shop name, granted access scopes, install and uninstall dates and an encrypted access token, so it can keep your installation working.
If you use the automations of the Pro plan, the server stores the choices you make on the Automations page: which automations are on, the order tag, which documents to create, the hour of the daily email, your shop's time zone and the email addresses of your document recipients (for example your forwarder) and of your team. It also keeps the ID of each new order an automation still has to look at, without the order's content, for 7 days so the same order is not handled twice.
For billing, the server records whether your shop has already used its free trial of the Pro plan, so a reinstall does not start a second one. Your plan and its charges are kept by Shopify and read from Shopify.
Each time you create documents or export a customs manifest, the server also records which feature you used, the document type and how many documents were created, with the time. These records contain counts only, no order, customer or document content, and are deleted after 30 days.
When Shopify sends a privacy request about one of your customers, the server logs that the request arrived, with the customer and order IDs it names but without the customer's name, email or phone.
To create customs documents, the app reads your orders and draft orders (line items, prices, discounts, shipping, taxes, fulfillment status), the returns of an order when you create return documents, your products (customs descriptions, weights, HS codes and countries of origin) and the recipient's name, company, shipping address, email and phone number. The recipient details are printed on the documents because customs authorities and carriers require them. When you add an HS code, a country of origin or a weight in the pre-shipment check, the app writes it to that product variant in your store.
In the app's pages, these orders are read inside your browser, and the PDF and CSV files are created in your browser and saved to your device.
When you print customs documents from the Print menu of an order or of the Orders list in your Shopify admin, the app's server reads the orders you selected, your settings and your logo and signature from Shopify and creates the PDF that the Print menu shows. It does this only for that one request: the order and customer data and the PDF are held in memory while the PDF is created and are not written to a database, a file or the server's logs. Order and customer data is not stored by the app.
When an automation of the Pro plan is on, Shopify tells the app's server about each new order and the server reads that order from Shopify the same way: it checks the order's customs data, adds the order tag you chose when data is missing, and creates the documents you chose. Once a day, if you turned on the daily email, it reads the orders created since the last email and creates their documents and a customs manifest. The same happens when a Shopify Flow workflow of yours runs the app's "Create customs documents" action. The order data and the files are held in memory only while this runs and are not written to a database, a file or the server's logs.
The in-app support chat is run by our support service, StoreFleet Support Hub. When you use it, the app sends the service your messages, your shop domain and shop name, your Shopify plan, the app's granted scopes and install date, and the name, email address, language and role (owner, staff or collaborator) of the staff member who is chatting, as provided by Shopify. The support service stores the conversation, linked to your shop domain, so our team can answer you.
When you turn them on, the automations email the documents and manifests they create to the document recipients you entered, and alerts about orders missing customs data to your team's addresses. These emails contain the order details printed on the documents, including the recipient's name and address; you choose who receives them. They are sent through our own mail server, which keeps delivery logs for a limited time but no copy of the attachments. Every email has an unsubscribe link: an address that unsubscribes is recorded with your shop and never emailed again.
Each time the app is installed or uninstalled, and the first time you create a customs document, the app sends a notice to our support service, StoreFleet Support Hub, which we operate. The notice contains your shop domain and shop name, whether the shop is a development store, the shop owner's email address (or the shop's contact email when the owner's is empty) and the shop's primary language.
We use the email address and language only to send you service emails about the app: a welcome, setup help, tips, questions about your satisfaction and feedback, a request to review the app, and a short note after you uninstall it. Development stores are never emailed. You can opt out at any time with the unsubscribe link in any of these emails or by writing to [email protected].
Once a day the app sends our support service, StoreFleet Support Hub, a usage summary for your shop: your shop domain and shop name, whether the shop is a development store, how many commercial invoices, proforma invoices and CN23 declarations were created in the last 30 days, how many of those runs covered several orders, how many customs manifests were exported, and whether an EORI number, an IOSS number and the origin statement are set in your settings (yes or no, never the numbers themselves). We use it to understand which features merchants rely on and where they need help.
The app's pages in the Shopify admin may use Microsoft Clarity, a product analytics service provided by Microsoft, to see how the interface is used: pages viewed, clicks, scrolling and a recording of the screen. The session is tagged with your shop domain, the app name and the app plan. Areas that show orders, recipients, your sender details and registration numbers, and the support chat are masked in the app, so their content is not sent to Clarity. Clarity runs with cookie consent set to denied, so it does not store Clarity cookies in your browser. Microsoft keeps Clarity recordings for 30 days, or up to 9 months for recordings we mark as favorites and a sample Microsoft selects at random. See Microsoft's privacy statement at privacy.microsoft.com/privacystatement.
Where data protection laws such as the GDPR or the UK GDPR apply, we rely on these legal bases for the processing described above:
Where a law requires your consent for a particular processing activity, we ask for it before that processing and you can withdraw it at any time through the contact above.
The app does not sell any data. To answer support chat messages, the support service mirrors them, with your shop domain and shop name, to our support team's Slack workspace (Slack Technologies). It may also use an AI model provider (Anthropic) to draft replies; for that it sends Anthropic the conversation's messages, your shop domain and shop name, and the name, email address, language and role (owner, staff or collaborator) of the staff member who is chatting. The app does not send your orders, products or your customers' data to Anthropic. Data about your shop, your staff or your customers, including data derived from it or aggregated with other data, is not used to develop or train artificial intelligence or machine learning models. Service emails and the automations' emails are delivered through our own mail server. When product analytics is on, usage of the app's admin pages is recorded by Microsoft Clarity as described above. Nothing else is shared with third parties.
Slack Technologies, Anthropic and Microsoft may process the data we share with them in countries other than yours, including the United States. This means support messages, shop details and product analytics data may leave the European Economic Area, the United Kingdom or Vietnam. Contact us at the address above if you want more information about these transfers.
The app handles Shopify's three mandatory privacy webhooks:
Feature usage records on the app's server are deleted after 30 days, and the order IDs queued for automations after 7 days. Your installation record, your automation settings and email addresses, the trial record, the privacy requests logged for your customers and your support conversations are kept while the app is installed. They are deleted when Shopify sends the shop erasure request after you uninstall, as described below. We keep only a record that your shop's erasure request arrived.
When you uninstall the app, Shopify revokes its access, the installation is marked as uninstalled and the stored access token is discarded. 48 hours later Shopify asks the app to erase your shop's data. The server then asks the support service to delete your shop's support conversations, deletes the privacy requests it logged for your customers, your automation settings, queued order IDs, email addresses and unsubscribe records and the trial record, and deletes your installation record. It keeps only a record that your shop's erasure request arrived. Copies of support messages already posted to Slack are not deleted automatically; ask us through the contact below to remove them.
Uninstalling does not necessarily remove the app data stored in your store's metafields; it may stay in your store until it is removed, and the app cannot reach it once uninstalled. To remove it, use the app before uninstalling: clear the customs descriptions on the Customs descriptions page and clear your sender details in Settings. If you have already uninstalled, reinstall the app to do this. Your interface language, document settings and document counter contain no personal data and stay in your store; contact us if you want help removing them.
Merchants and their staff can ask us to access, correct or delete the personal data we hold about them, or object to service emails, by writing to [email protected]. Depending on where you live, you may also have the right to complain to your data protection authority. Your customers should send privacy requests to your store; Shopify forwards them to the app as described above.
Questions about this policy or requests about your data can be sent to [email protected]. Once the app is listed, you can also use the support contact on the app's Shopify App Store listing.