Privacy policy
Last updated: September 14, 2026
Emphanic operates Emphanic QR-Rechnung. Contact: info@emphanic.com. This policy describes the app’s processing of merchant and customer information.
Information we store
We store your shop domain, Shopify authentication sessions and access/refresh tokens, session identity fields supplied by Shopify, and your saved payee name, address and IBAN. We also store limited shop-level installation, privacy-request and data-access events. Access records contain the Shopify staff identifier, shop, time and operation, without customer/order identifiers or payment details. These records are linked to your shop and are not anonymous.
Customer information and PDFs
We read order identifiers, payment status, remaining balance, currency, and the order’s billing/shipping name and address to prepare a payment slip. Customer addresses and generated PDFs are processed in memory and are not retained in our application database. PDFs downloaded to your device or shared by you remain under your control. We do not collect bank logins or process the buyer’s transfer.
Purpose and service providers
We use this information to authenticate the shop, remember your payment details, generate the requested document, verify the app subscription, and handle support and privacy requests. Shopify provides order data and app billing. Vercel hosts the app and Neon provides PostgreSQL storage. Hosting is configured in Frankfurt; this is not a guarantee that all processing, operational logs or backups remain in one country. Provider processing is subject to their applicable terms and safeguards. We do not sell this information or use customer addresses for advertising.
Retention and deletion
Application events and access records are deleted after 90 days by daily cleanup. Authentication sessions are removed on uninstall. Saved settings are retained until Shopify sends its shop-redaction webhook, normally about 48 hours after uninstall, and the deletion succeeds. We delete the shop’s application records when processing that request. Provider logs and backups follow their own retention settings and do not necessarily disappear at the same time. Support correspondence is handled separately. Contact us for a deletion or retention question.
Your choices and rights
You can update saved payee information in Settings and stop future access by uninstalling the app. Merchants and customers can contact info@emphanic.com to request access, correction or deletion, subject to applicable law and identity verification. Shopify’s mandatory privacy webhooks are supported. If the request concerns a document you received from a merchant, contact that merchant as well.
Security
Connections use HTTPS. Shopify authenticates app requests and signs webhooks. Access tokens remain on the server, and the application separates records by shop. Do not email us passwords or bank login information.