Privacy Policy
Last updated October 15, 2026.
This policy covers every Shopify app published by Itacoa Mídias Digitais ("Itacoa", "we"). It explains what each app accesses when a merchant installs it, why, and what happens to that data. Each app requests only the store permissions it needs, and none of them sells data or shows ads.
What every app collects
- Your store's myshopify.com address and an access token issued by Shopify, so the app can work on your behalf.
- The settings you choose inside the app.
Unless stated in the table below, our apps do not access your customers, orders or payment information.
What each app accesses and stores
| App | Reads from your store | Stores on our servers |
|---|---|---|
| Invoice to Inventory | Products, variants, SKUs, barcodes, prices, unit costs, stock and locations. | What was read from your invoices (supplier, number, date, totals, product lines), invoice history and supplier matches. Uploaded files are not stored. |
| Backorder Limit | Variants' stock quantities and "continue selling when out of stock" setting. | Your limits per product and which variants the app paused. |
| Sale % Collections | Product prices, compare-at prices and tags. | Your discount levels and the IDs of the collections the app created. |
| Auto SKU for Variants | Product titles, variant options and SKUs. | Your settings only. |
| Auto 301 Redirects | Product titles, URLs (handles), status and first collection. | Product URL, title and collection for each product, and the redirects the app created. |
| PO Box Block | Product tags. At checkout, Shopify runs our rule on the cart and the shipping address; the address is not sent to or stored by us. | Your settings only (stored by Shopify on the rule). |
| Search Fixes | Product SKUs, handles and whether a product is published. When a shopper searches a SKU, the search text passes through our server to find the product and is not stored. | Nothing; your search rules are saved on your store by Shopify. |
| Case Pack Quantities | Product titles. At checkout, Shopify runs our rule on the cart quantities; the cart is not sent to or stored by us. | The products you chose and their pack, minimum and maximum. |
| Pickup Only Products | Product tags and whether your locations offer local pickup. At checkout, Shopify runs our rule on the delivery options; nothing is sent to or stored by us. | Your settings only (stored by Shopify on the rule). |
| Express Cutoff Time | Your store's local time and shipping rate names, read by Shopify at checkout when it runs our rule; nothing is sent to or stored by us. | Your settings only (stored by Shopify on the rule). |
Uploaded invoice files (Invoice to Inventory)
When you upload a supplier invoice, the file is sent to Google's Gemini API to read its contents. We keep only what was read from it. We do not store the file itself. Google processes it under its paid API terms, which do not allow it to be used to train Google's models.
How we use it
Only to provide the app you installed. We do not sell data, show ads, or share it with anyone except the service providers below.
Service providers
- Shopify — hosts your store, authenticates the apps and runs checkout rules.
- Google (Gemini API) — reads uploaded invoice files (Invoice to Inventory only).
- Cloudflare — network and security for our servers.
- Hostinger — hosts the servers and databases where app data is stored.
Retention and deletion
- Data is kept while the app is installed, so it keeps working and you can see your history.
- When you uninstall an app, Shopify notifies us and we delete all of your store's data for that app within 48 hours.
- You can ask us to delete everything at any time by writing to support.
Your rights
Depending on where you are, you may have the right to access, correct, export or delete personal data, and to object to its processing — including under the GDPR, the CCPA and Brazil's LGPD. Write to support@itacoa.tech and we will answer within 30 days. Requests Shopify forwards to us on behalf of your customers are handled the same way; since our apps do not store customer data, there is usually nothing to return.
Security
Data is sent over encrypted connections, our servers accept no direct connections from the internet, and access is limited to the people who operate the apps.
Changes
When we add an app or change this policy in a way that matters, we update the date above.
Contact
Itacoa Mídias Digitais, Brazil — support@itacoa.tech