Privacy Policy

Last updated: 11 October 2026

In short: Kurumsal Fatura Formu writes the invoice details a customer enters in the cart (company name, tax number or national ID, tax office) into the order in Shopify. That data stays in Shopify; the app server stores no customer data.

Who we are

The app is operated by Lyro Digital, Emaar Residence, Ünalan, Libadiye Cd. No:82 E Blok Kat:29 Daire:291, 34700 İstanbul, Türkiye. For privacy questions: info@lyrodigital.com

What the app processes

Invoice details entered in the cart: company name, tax number or national ID, tax office. They are validated in the customer's browser and written straight to the Shopify cart (cart attributes, order note, company field of the shipping address).
When an order is created: Shopify sends the app the order ID, note and note attributes only. The app adds a tag and metafields to the order. Customer name, email, phone and address are not sent to the app.

What the app server stores

The store's myshopify.com domain and the access token Shopify issues at install.
The session of the staff member who opens the app, to keep the session valid.

No personal data of customers and no invoice details are stored on the app server.

Purpose and sharing

Data is processed only so the merchant can issue corporate invoices. It is never sold, never used for advertising or profiling, and never shared with third parties.

Security

All connections use HTTPS. The app database sits on an encrypted disk volume. Requests from Shopify are verified by signature.

Retention and deletion

When the app is uninstalled, the store's session records are deleted. On Shopify's shop redact request, all records for the store are deleted. Invoice details inside orders remain in the merchant's Shopify account under the merchant's own retention rules.

Your rights

Customers can send requests about their personal data to the merchant. Customer data requests received through Shopify (customers/data_request, customers/redact) are handled; because the app stores no customer data, there is nothing to return or delete.