Privacy policy
Last updated 2026-07-20. Draft — to be finalised before App Store submission.
What we process
Duebook processes Shopify order totals, payment-terms dates and financial status, company records, and the name and email address of company contacts. We do not process order line items, buyer addresses, payment-method or card data, or any data about direct-to-consumer customers.
Why
To maintain the merchant's accounts-receivable ledger, enforce credit limits at checkout, and — where the merchant enables it — send payment reminders and statements on the merchant's behalf.
Where
Data is stored in the European Union (DigitalOcean, Frankfurt, Germany). Subprocessors: DigitalOcean LLC (hosting; servers in Frankfurt, Germany, company incorporated in the United States — under a data processing agreement and standard contractual clauses), Resend (email delivery, US — under a data processing agreement and standard contractual clauses), PostHog EU (aggregate product analytics; receives no customer fields).
How long
Ledger data is retained while the app is installed. On uninstall, data is deleted within 48 hours. Statement PDFs and email bodies are never stored. Requests undercustomers/redact and shop/redact are honoured automatically.
Your data is never used to train anything
We do not sell data and do not use merchant or buyer data to train models.