Privacy Policy

Last updated: 12 August 2026

Who we are

Onopo is operated by Anton Kuznecov, Sommeracher Straße 7, 90427 Nürnberg, Germany (see Impressum). We provide a Shopify application that creates and sends B2B invoices and payment reminders on behalf of merchants.

Data we process

When a merchant installs Onopo, we access data from their Shopify store strictly to provide the service: order data (order number, line items, amounts, currency, payment terms and due dates), company and contact data of the merchant's business customers (company name, contact name, email address, billing address) and shop settings the merchant enters in the app (company details, VAT ID, bank details, logo).

Why we process it

To generate invoice documents, deliver them by email, track outstanding receivables and send payment reminders — the core functions the merchant installs the app for. Legal basis: performance of a contract (Art. 6(1)(b) GDPR) and legitimate interest in operating and securing the service (Art. 6(1)(f) GDPR).

Processors we use

Hosting: Render (servers in the EU). Database: Neon (EU region). Email delivery: Resend. Each processes data on our instructions under a data processing agreement. We do not sell data and do not use it for advertising.

Retention

Invoice records are kept while the app is installed. On uninstall, shop data is deleted within 48 hours, unless statutory retention obligations require otherwise. Merchants can request earlier deletion at any time.

Your rights

You may request access, rectification, deletion, restriction or portability of your data, and object to processing. Contact: support@onopo.com. You also have the right to lodge a complaint with a supervisory authority.

Shopify data requests

We implement Shopify's mandatory privacy webhooks (customers/data_request, customers/redact, shop/redact) and respond to such requests within the periods Shopify requires.

Changes

We will post changes to this policy on this page and, for material changes, notify merchants by email.