Privacy Policy
Docket: Invoice & Packing Slip · last updated 11 August 2026
Docket: Invoice & Packing Slip sells designed Liquid templates for the packing slip, invoice and pick list a Shopify store already prints. It requests no access scopes, which means most of what a privacy policy normally has to explain does not apply here: there is no store data to describe, because none is ever read.
What this app never reads
The app holds no permission to read your products, orders, customers, themes or any other store resource, and no permission to write to your store. This is not a promise about restraint — the access was never requested and was never granted, so the ability does not exist. You can confirm it on the install screen, which lists no permissions at all.
Because of that, the app holds no customer personal data whatsoever. The templates it sells reference your customers’ details through Shopify’s own Liquid variables, which Shopify resolves inside your store at the moment a document is printed. Those values are never sent to this app and never pass through its servers.
What this app stores
| Your store domain | For example your-store.myshopify.com. A store address, not a person. |
| A Shopify session token | Issued by Shopify so the app can confirm a request genuinely came from your admin. The app uses offline tokens, so no staff name, email or user ID is stored with it. |
| Your brand kit | Only what you type in: colours, type choices, store name, store URL and an optional logo URL. |
| One purchase record | Your store domain, the charge identifier and charge name Shopify confirmed, which tier you bought, which document you chose where the tier involves a choice, the amount, the currency, whether it was a test charge, and the dates. No name, no email, no address, no payment details — Shopify handles payment and this app never sees a card. |
When you uninstall
Session tokens stop working the moment you uninstall, and the app deletes them. Around 48 hours later Shopify sends a shop redaction request. At that point the app deletes your brand kit and any remaining session rows for your store.
What is kept after redaction, and why
The purchase record is retained. This is a deliberate, disclosed exception, on two grounds:
- It is a record of a financial transaction. Retaining proof of a payment for tax and accounting purposes is standard and expected of any app that takes money.
- Deleting it would destroy your own entitlement. The product is sold once and kept forever, so if the record were erased, reinstalling would ask you to pay again for something you already own. That would harm you rather than protect you.
The record contains no personal data — every field on it is transaction data, and the store domain is an address rather than a person. If you want it removed anyway, write to the address below and it will be deleted, with the consequence above understood.
Customer data requests
If a customer of your store asks what data this app holds about them, the answer is none. The app responds to Shopify’s customers/data_request and customers/redact requests, and in both cases there is nothing to return and nothing to erase, because no customer data was ever received.
Third parties
The app runs on Vercel and stores the data above in a Postgres database. No data is sold, rented or shared for advertising, and there is no analytics or tracking script on the app’s admin pages.
Contact
Questions, or a request about your data: milos.it.petrovic@gmail.com.