Privacy policy
Last updated: August 24, 2026
InvoiceHold is an embedded Shopify app published by Brandionary. This policy explains what we store when a merchant installs the app. It applies to merchants and, where relevant, their customers.
Who we are
Brandionary operates InvoiceHold. Questions about this policy or a data request: hello@brandionary.com.
What we collect
InvoiceHold reserves inventory on Shopify draft order invoices. We store only what that job needs:
- Shop domain and Shopify OAuth session (access token).
- Staff account fields Shopify sends during login (name, email), used only to keep the session valid.
- Draft order IDs, draft names, hold timestamps, status, and a line item snapshot for the Holds screen.
- Customer email only when Shopify already attached it to the draft, so merchants can recognize the quote. We do not store addresses or phone numbers.
- Webhook event IDs so the same Shopify delivery is never processed twice.
How we use data
We use this data to call Shopify's draft order reservation API, show holds in the embedded admin, and keep the app authenticated. We do not sell personal data, and we do not use it for advertising.
Where data is stored
The app and its database are hosted by Brandionary (SQLite in development, PostgreSQL in production). Shopify also holds merchant and customer data under Shopify's own policies.
Sharing
We share data with Shopify (API calls required to reserve inventory) and with our hosting provider. We do not share it with other third parties except if the law requires it.
Retention
Shop data is kept while the app is installed. After uninstall, Shopify asks us to delete shop data (typically within 48 hours). We then delete sessions, settings, holds, logs, and webhook IDs for that shop. Draft emails are cleared when Shopify sends a customer redaction request.
Your rights
Merchants can uninstall the app at any time. Shopify also forwards customer data and deletion requests to us. We respond to those webhooks and complete deletion within 30 days. For any other request, email hello@brandionary.com.
Children
InvoiceHold is a merchant tool. It is not directed at children and does not knowingly collect data from children.