Who we are
Storeassist (storeassist.io) is provided by [Bolagsnamn AB], company registration number [Org.nr], [Adress]. Email questions about personal data to [kontakt@storeassist.io].
Storeassist is an app for Shopify stores. It creates invoices and bookkeeping in Fortnox or Visma eEkonomi and handles purchasing, stock, B2B storefronts and a customer club. It runs inside Shopify, as a web app on app.storeassist.io and as a mobile app.
Our two roles
For data about your customers, B2B buyers and suppliers, you as the merchant are the controller and we are your processor. We process that data only on your instructions, under our Data Processing Agreement.
For user accounts, sign-in and security, and for our dealings with you as a customer, we are the controller.
Data about your customers
Storeassist reads most data from Shopify when you need it and stores only what a feature requires. It may process the following about your customers:
- Contact details: name, email, phone, billing and shipping address, company name and registration number.
- Orders: products, amounts, discounts, payments, returns and refunds.
- Invoicing: what we send to and receive from Fortnox or Visma eEkonomi, and the link between the Shopify customer and their customer number in your accounting.
- Customer club: customer ID, member number, points, total spend, birthday if the customer gave it, marketing consent and points history.
- B2B buyers: company, the buyer's name and email, delivery addresses with a contact person, orders, and hashed sign-in codes and sessions.
- Suppliers: the contact person's name, email and phone, notes, and replies and uploaded files through the supplier portal.
The data comes from Shopify, from you and your staff, and from B2B buyers and suppliers who use their portals.
Data about you and your staff
- Account: email, name, language, password hash (argon2id), encrypted two-step verification key, hashed recovery codes and the role in each store.
- Sign-ins: hashed session tokens, device name, platform and app version, hashed device ID, and timestamps.
- When the app opens in Shopify: Shopify's session data, which can include the staff member's name and email.
- Traceability: the name of who did something, such as a stocktake, a points adjustment or a B2B order decision.
- Audit log: who opened or changed customer data and when, which record and which fields, the IP address shortened to its network, and a hash of the browser's user agent.
- Acceptances: which version of the terms and the Data Processing Agreement was accepted, when and by whom.
Purposes and legal basis
Where we are the processor, you decide the purposes and the legal basis. We process the data to deliver the features you use: invoicing and bookkeeping, B2B storefronts, customer club, purchasing, stock, labels and reports.
Where we are the controller, the following applies under the General Data Protection Regulation (GDPR):
| Purpose | Data | Legal basis |
|---|---|---|
| Give you and your staff accounts and sign-in | Account and sign-in data | Contract with you (Art. 6(1)(b)). For your staff: our and your legitimate interest in secure access (Art. 6(1)(f)). |
| Send sign-in codes, password links, invitations and new-device notices | Email, name, language | Contract (Art. 6(1)(b)) and legitimate interest (Art. 6(1)(f)). |
| Protect the service, detect abuse and investigate incidents | Audit log, sign-ins, hashed rate-limit keys | Legal obligation to protect the data (Art. 6(1)(c) and 32) and legitimate interest (Art. 6(1)(f)). |
| Show that the terms and the Data Processing Agreement were accepted | Version, time, user, IP address | Legal obligation (Art. 5(2) and 28) and legitimate interest (Art. 6(1)(f)). |
| Answer support requests | What you write to us | Legitimate interest (Art. 6(1)(f)). |
How long we keep data
Shopify sends shop/redact 48 hours after you uninstall the app, and we then delete everything we hold about the store. At the uninstall itself we immediately delete sessions, access keys and queued jobs, and suspend staff access.
| Data | How long | How it is deleted |
|---|---|---|
| Shopify sessions, including the name and email of staff who open the app in Shopify | Until the app is uninstalled | Deleted as soon as Shopify reports the uninstall. |
| Access keys for Fortnox and Visma eEkonomi | Until you disconnect or uninstall | Deleted when you disconnect, and immediately on uninstall. |
| The invoice log: what we sent to and received from your accounting, with the customer's name, address and email | Until the customer or store is deleted | Deleted for the customer's orders when Shopify sends customers/redact, and entirely when Shopify sends shop/redact. |
| The link between a Shopify customer and their customer number in your accounting | Until the customer or store is deleted | Same as the invoice log. |
| Customer club members: customer ID, member number, points, spend, birthday, marketing consent and points history | Until the customer or store is deleted | Deleted when Shopify sends customers/redact or shop/redact. |
| B2B companies, buyers, addresses and B2B orders | While the store uses Storeassist | Deleted at shop/redact. You can block companies and buyers yourself; we delete a single buyer on request within 30 days. |
| B2B buyers' sign-in codes and sessions | Codes last 10 minutes; sessions end after 12 hours idle or 30 days at most | Sessions are removed when used after expiry, when the buyer is blocked, and at shop/redact. |
| Suppliers, their contact people, and replies and uploaded files through the supplier portal | Until you remove the supplier or the store is deleted. Uploaded files never submitted: until the link expires | You remove the supplier in the app; everything is deleted at shop/redact. Files never submitted are deleted automatically. |
| Original imported files (cost prices, payout files, purchasing imports) | 90 days | Deleted automatically by the storage and a daily cleanup, and at shop/redact. |
| B2B storefront images (logo, hero image), public to anyone with the link | While the store uses Storeassist | Deleted at shop/redact. |
| Bookkeeping evidence (PDF) and other store data such as purchasing, stock and stocktakes with the name of who did it | While the store uses Storeassist | Deleted at shop/redact. Export anything Swedish bookkeeping law requires you to keep before you uninstall. |
| Email sent in the store's name (B2B, proformas, invitations) | While the store uses Storeassist | Deleted at shop/redact. |
| Email to users about sign-in, passwords and new devices | 30 days | Deleted by a daily cleanup. |
| User accounts: email, name, password hash, two-step key and roles | Until the account is deleted | Users delete their own account. An account that belongs to one store only is deleted at that store's shop/redact. |
| Sign-ins and devices | Web: 12 hours idle, 30 days at most. Mobile: 30 days since last use, 90 days at most | Deleted a day after the session expires or is signed out, by the daily cleanup. |
| One-time codes, device pairings and unanswered invitations | Codes last 10 minutes at most; invitations until they expire | Deleted by the daily cleanup: codes and pairings a day after they expire, invitations when they expire. |
| Background jobs | 30 days after the job finishes | Deleted automatically. Queued jobs are deleted on uninstall. |
| Duplicate-submission guard | 24 hours | Deleted automatically. |
| Audit log of access to personal data (who, when, which record and which fields, never the data itself) | 12 months | Deleted on a rolling basis and at shop/redact. |
| Backups of the whole database | 14 days | A nightly encrypted copy on the server and an encrypted off-site copy. Data you delete stays in backups for 14 days at most. Stored files, such as bookkeeping evidence, are not part of the backups. |
| Server logs | Rotated by size, 3 months at most | The application logs record no visitor IP addresses, customer data or link tokens. |
We keep support requests for up to 24 months after the request is closed.
Who we share data with
We never sell personal data or use it for advertising. Our sub-processors, and the services you connect yourself such as Fortnox, are listed on the Sub-processors page.
We disclose data to authorities only when the law requires it.
Transfers outside the EU/EEA
The database and its backups live on encrypted disks at UpCloud in Stockholm. The off-site backup copy is stored in Cloudflare R2 in the EU and is encrypted before it leaves our server. Uploaded files, bookkeeping evidence and B2B storefront images are also stored in Cloudflare R2 in the EU; Cloudflare encrypts them at rest, but not with our own key. Where a sub-processor is a company outside the EU/EEA, the transfer is covered by the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.
How we protect data
- All traffic is encrypted with TLS, and stored data and backups are encrypted.
- Passwords are hashed with argon2id. Owners and admins must use two-step verification, and new devices are confirmed with a code.
- Members with the staff role never see customers' email, phone or addresses. Only admins and owners do, and every such access is logged.
- Stores are separated in every database query, and no store can see another store's data.
- The server can only be reached over SSH with a key from an approved address, behind two firewalls.
The full list of technical and organisational measures is Annex 2 to the Data Processing Agreement.
Website and cookies
storeassist.io uses no analytics or advertising cookies and no analytics tools. Your choice of light or dark mode is saved only in your browser.
The web app on app.storeassist.io uses one necessary session cookie (__Host-sf_session) for sign-in. B2B storefronts use necessary cookies for the buyer's sign-in (__Host-sf_b2b and __Host-sf_b2b_login).
Your rights
You have the right to access your personal data, have it corrected or erased, restrict processing, object to processing based on legitimate interest, and receive your data in a machine-readable format.
If you shop at a store that uses Storeassist, the store is responsible for your data, so contact the store. If you contact us, we pass your request on to the store. For questions about your user account, email [kontakt@storeassist.io]. We reply within one month.
Complaints
If you think we process your personal data incorrectly, you have the right to complain to the Swedish Authority for Privacy Protection (IMY), Box 8114, 104 20 Stockholm, Sweden, imy.se. Please contact us first so we can try to resolve it.
Changes
For material changes we email the store owner at least 30 days before they take effect. The date at the top shows which version you are reading.