Privacy policy
Last updated: October 4, 2026
Invoicepak is a Shopify app that creates branded PDF invoices for Shopify orders and emails them to the store's customers. It is operated by Rajan Karmakar (“we”, “us”). This policy explains what information Invoicepak collects, how it is used and shared, and how long it is kept.
Our role
For information about a store's customers, the merchant who installed Invoicepak is the data controller and we act as a processor on the merchant's behalf. We only process customer information to provide the invoicing features the merchant has turned on.
Information we collect
About the merchant's store. When a merchant installs Invoicepak we receive the store's Shopify domain and ID, and an access token that lets the app call the Shopify API on the store's behalf. We also store what the merchant enters in the app: business details shown on invoices (company name, email, phone, address, website, tax number and logo URL), invoice templates, invoice and email settings, and, if set up, a custom sending domain and its DNS records. We keep counts of invoices emailed and PDFs downloaded to apply plan limits.
About the store's customers. To build an invoice, Invoicepak reads the order from Shopify, including the customer's name, email address, phone number, billing and shipping addresses and the items ordered. Addresses, phone numbers and order line items are used to generate the invoice and are not stored by us. With each invoice record we store the customer's name and email address, the order number, amount, currency and whether the invoice was sent, so the merchant can see and resend past invoices. If an invoice email bounces permanently or the recipient marks it as spam, we store that email address on the store's suppression list so it is not emailed again.
Technical information. When something goes wrong we collect error diagnostics, such as the page or request involved and a stack trace, to find and fix bugs. We do not use advertising or analytics trackers.
How we use information
- To generate invoices and email them to the store's customers.
- To show the merchant their invoice history and let them resend or download invoices.
- To apply the merchant's plan and its usage limits.
- To keep the service secure, reliable and working correctly.
- To respond to support requests.
We do not sell personal information, and we do not use it for advertising.
Service providers
We share information only with the providers we need to run Invoicepak:
- Shopify, which provides the store and order data and handles billing for paid plans.
- Resend, which delivers invoice emails. It receives the recipient's email address and name, the email content and the PDF invoice.
- Railway, which hosts the app and its database.
- Sentry, which receives error diagnostics.
These providers may process information in countries other than your own. We may also disclose information if the law requires it.
How long we keep information
Invoice records are kept while Invoicepak is installed, because they are the merchant's record of invoices sent. When a merchant uninstalls the app, automatic invoicing stops and the stored access token is deleted straight away. About 48 hours later Shopify asks us to erase the store's data, and we then delete everything we hold for that store, including invoice records, templates, settings and suppression lists.
When Shopify sends us a customer's erasure request, we remove that customer's name and email address from the store's invoice records and suppression list.
Security
All traffic to Invoicepak is encrypted with HTTPS. The app signs in through Shopify, verifies every webhook Shopify sends, and keeps each store's data separate from every other store's. Payment details are handled entirely by Shopify and never reach us.
Your rights
If you are a customer of a store that uses Invoicepak, please contact that store first: it decides how your information is used and can ask us to access or delete it. Shopify passes customer data requests and erasure requests on to us, and we act on them. Merchants can contact us at support@invoicepak.com to access, correct or delete their information. Depending on where you live, you may also have the right to complain to a data protection authority.
Children
Invoicepak is a business tool and is not directed at children.
Changes to this policy
If we change this policy we will update the date at the top of this page. If the changes are significant we will tell merchants in the app or by email.
Contact
Questions about this policy or about your information can be sent to Rajan Karmakar at support@invoicepak.com.