Privacy policy
Last updated: 14 October 2026
Foliant is a Shopify app that makes invoices, packing slips and other order documents. It’s built and run by Iforiti (“we”, “us”). This policy explains what personal data Foliant handles when a store installs it, why, and what rights you have. For a plain list of what Foliant keeps and when it’s deleted, see Your data and privacy.
Who is responsible
- For your store’s account data (the store, its staff and its billing), we’re the controller.
- For your customers’ data (the people who buy from your store), your store is the controller. We process it only on your behalf, to provide Foliant’s features, and only as you instruct through the app.
Questions about this policy or your data: support@iforiti.com.
What we collect
From Shopify, when you install and use Foliant
| Data | Examples | Why |
|---|---|---|
| Store details | Store name, myshopify.com address, contact email, country, currency, Shopify plan | To run your account, show your details on documents, support and billing |
| Staff who open Foliant | First and last name, email address, language, whether they own the store | To sign them in, show the app in their language and record who did what in the activity log |
| Orders and draft orders | Order number, items, prices, taxes, discounts, payment and fulfilment status, notes, tags | To make the documents you print, export or send |
| Your customers’ details on those orders | Name, billing and shipping address, email, phone, company, VAT or tax number | To print them on your documents and send documents to your customers when you ask Foliant to |
| Products, locations, markets and returns | Titles, SKUs, images, locations | To fill in your documents and pick lists |
Foliant can read all of your store’s orders, not only the last 60 days, so you can reprint, export, credit and e-invoice older orders, and your customers can download invoices for them from their account. It reads orders live from Shopify each time it makes a document. It doesn’t keep a copy of your orders or customer list, except in the cases listed under What we keep.
What you add in Foliant
Templates, branding, logos and files you upload, settings, legal and tax details, email text, and integrations you connect.
Created while you use Foliant
- Which orders were printed and when, document numbers, and issued (locked) invoices and credit notes with the order details they were made from.
- Export history, including the email addresses exports were sent to.
- PDF delivery’s email history: who each email went to and whether it was delivered, plus addresses that bounced or reported spam.
- Checks of buyers’ VAT numbers.
- An activity log of changes made in Foliant and who made them.
- Technical data: performance measurements of the app (page, load times and country, without personal details) and server logs (such as IP addresses and errors) used to keep the service secure and working.
When you contact support
Support chat and email messages, plus the store details the chat needs to identify your store (store name, email, myshopify.com address and plan).
How we use it
- To provide Foliant: make, print, export, store and send your documents, and run the features you turn on.
- To bill you through Shopify and apply your plan’s limits.
- To give support and tell you about changes to the service.
- To keep Foliant secure, prevent abuse and fix problems.
- To meet legal obligations, such as keeping billing records.
We don’t sell personal data, use it for advertising, or use your customers’ data for any purpose of our own.
Where the GDPR or similar laws apply, we rely on performing our contract with you (providing the app), our legitimate interest in running and securing the service, and our legal obligations. For your customers’ data, we act on your instructions as your processor.
Who we share it with
We share data only with the service providers that run Foliant, and only what each one needs:
| Provider | What for | Where |
|---|---|---|
| Shopify | The platform Foliant runs in: sign-in, your store’s data and billing | Worldwide |
| OVHcloud | Servers and database that run Foliant | United States |
| Cloudflare | File storage (templates, uploads, PDFs, exports, backups) and network services | Worldwide |
| Vercel | Hosting for the Foliant app pages you see in the Shopify admin, and for this website | Worldwide |
| Freshworks (Freshchat) | Support chat | United States |
| Brevo | Sending the emails Foliant sends, such as PDFs to your customers, and verifying your own sending domain if you set one up | European Union |
| Recommand | Peppol e-invoicing, only if you connect it | European Union |
We may also disclose data when the law requires it, or to a buyer of our business, under this same policy.
International transfers
Foliant’s servers are in the United States, and some providers work in other countries. Where the law requires it, transfers are covered by safeguards such as the European Commission’s Standard Contractual Clauses.
What we keep
| Data | How long |
|---|---|
| Your templates, settings, files and activity log | While Foliant is installed |
| Issued (locked) invoices and credit notes | For the years you choose under Keep issued documents for, then the customer’s details are redacted. Deleted when your store’s data is erased after uninstalling |
| PDF delivery’s email history | 90 days |
| Export archives | A limited time, so you can download them |
| Server logs | 14 days |
| Backups | A few days, then replaced |
| Records of your plan and charges | After you uninstall, to reconcile charges and allow one free trial per store. They contain no customer data |
When you uninstall, Shopify asks us to erase your store’s data about 48 hours later, and we delete it except the billing records above. See Your data and privacy.
Your customers’ privacy requests
When one of your customers asks your store to erase their data, Shopify tells Foliant and we remove or redact what Foliant holds about them, as described in When a customer asks to be erased. When a customer asks your store for their data, Shopify forwards the request to us; contact us if you need to know what Foliant holds for that customer.
Your rights
Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict how we use it, and to withdraw consent. To use any of these rights, email support@iforiti.com. We’ll reply within 30 days. If you’re one of a store’s customers, please contact that store first: it decides how your data is used, and we’ll help it respond.
You can also complain to your local data protection authority.
Security
Data is encrypted in transit, access tokens are encrypted at rest, and backups are encrypted. Access to production systems is limited to the people who run Foliant.
Cookies and local storage
Foliant uses your browser’s storage only to keep you signed in and remember app preferences. The support chat stores its own data so your conversation continues. We don’t use advertising or tracking cookies. This website sets no cookies.
Children
Foliant is a tool for businesses and isn’t meant for children.
Changes to this policy
If we change this policy, we’ll update the date at the top. If a change is significant, we’ll tell you in Foliant or by email.
Contact
Iforiti, support@iforiti.com.