Last updated 18 October 2026
PDF Invoice Maker.io is operated by Understory. It lets Shopify merchants design invoices, issue them for their orders, and print or download them as PDFs. This policy explains what the app touches and why.
The app reads your orders to build invoices and never changes anything in your store. When you issue an invoice, we keep a copy of it so it can be downloaded again exactly as it was issued. That copy holds what an invoice needs: the buyer's name, company, addresses and email as they appear on the order, the items and the amounts.
The app has read access to your orders and nothing else. From an order it reads the order number and date, the items with their prices, discounts, shipping, taxes and totals, the payment status, and the buyer's billing and shipping address and email. From your store it reads its name, email and address, used on the invoice unless you enter your own business details.
For your store we save your invoice designs (layout, colours, labels, business details, tax ID and logo, with earlier versions so you can restore one), your invoice numbering, the plan you are on, and an expiring access token so invoices can be printed from the Shopify admin. For each invoice you issue we save its number, the order it belongs to and a snapshot of the invoice content described above. Nothing is saved for orders you never issue an invoice for.
Plans are handled by Shopify. The app reads which plan is active and counts the invoices issued this month to apply its limit. We never see payment details.
Cloudflare hosts the app, stores the data described above, renders PDFs and receives Shopify's required privacy notifications. Support email is handled through Gmail. We do not sell merchant or buyer information, and we do not use it for advertising.
Issued invoices are kept for as long as the app is installed, because they are part of your business records. When you uninstall the app the access token is deleted at once. When Shopify asks us to erase your store's data, 48 hours after uninstall, every design, setting and invoice is deleted. When Shopify asks us to erase a buyer's data, their name, company, addresses and email are removed from the stored invoices of their orders; the amounts and invoice numbers stay so your records still add up.
If you would like to access, correct or delete any information, or have a question about this policy, contact us below. Depending on where you live, you may have additional privacy rights, including the right to contact your local data protection authority.
If this policy changes, we will post the update here with a new date. For privacy questions or requests, email support.understory@gmail.com.