Effective October 9, 2026.
OrderPDF creates documents and manages production tasks for Shopify merchants. The operator identified below provides the service. For store customer data, the merchant determines the purposes of processing as the controller, and OrderPDF processes that data on the merchant's behalf to provide the features the merchant uses.
Information we process
With the merchant's authorization, OrderPDF reads recent Shopify orders and draft orders. This includes order identifiers, names and dates; item names, variants, quantities, SKUs, prices and currency; totals, discounts, shipping charges and taxes; notes and custom attributes; customer identifiers; and shipping names, companies and addresses. Regular order browsing covers the most recent sixty days.
The app does not request Shopify customer email or phone fields. Notes, custom attributes, uploaded branding and production instructions may contain personal information supplied by a merchant. Include only the information needed for your documents and production work.
OrderPDF stores shop identifiers and authorization sessions, source snapshots, templates and branding including uploaded logos, generated PDFs and document records, usage and subscription status, production tasks and their history, and batch, workflow, automation and privacy-request records. If you contact support, we also receive the information you choose to send.
How information is used and accessed
We use this information to generate and display documents, provide downloads, run merchant-configured batches and rules, track production, account for usage, confirm access and handle privacy requests. OrderPDF does not change Shopify orders, payments or fulfillment.
Shopify supplies the authorized store data and authentication, and manages app subscription approval when plans are available. The application and its database are hosted on DigitalOcean in the New York region of the United States. Store information is processed there, including when the merchant or customer is located elsewhere.
Workspace access uses Shopify authentication and is scoped to the authenticated store. Download links contain signed tickets valid for up to five minutes and can be used by anyone holding the valid link while the document and store access remain available. Keep downloaded files and links private. Public download responses instruct browsers not to cache the file.
Retention and deletion
The app schedules the following cleanup. Removal is performed by its background worker after the retention boundary:
- Generated PDF file contents expire seven days after generation. Document records can remain after the file expires.
- Order and draft-order snapshots expire after thirty days. Reusing a snapshot for a new document renews that snapshot's thirty-day window.
- Completed or cancelled production tasks and their task history are removed after ninety days. Active tasks do not have a fixed expiry.
- Private customer-data export access expires after seven days.
- Completed or cancelled batch item records and shared batch fields are cleaned up after thirty days without an update. Finished automation records and processed webhook records also have thirty-day cleanup rules. Pending or failed requests may remain for handling or retry.
Document source names and customer/order identifiers are removed once the PDF has expired and no retained source or production task depends on that document. Usage totals, quota and subscription records, document identifiers and duplicate-request records may remain for accounting and to prevent duplicate work; they do not share the PDF's seven-day expiry. Active templates, branding, rules, workflows and shop settings remain until changed, deleted through an available app control, or removed by a shop deletion request.
Merchants can export retained app data and delete saved documents and tasks from Settings. That deletion pauses automatic rules and clears associated saved source and production data, while retaining usage and duplicate-request history. It does not cancel a Shopify subscription.
Uninstalling disables app access, removes authorization sessions and stops pending work. It does not immediately erase every saved record. Shopify's subsequent shop-redact request triggers deletion of the app-held shop records. Automatic database backups are not enabled in the current deployment; this policy does not promise removal from provider infrastructure beyond the app's own deletion controls. Files already downloaded by a merchant are outside those controls.
Customer privacy requests
Customers should contact the merchant whose store holds their order to request access, correction or deletion. OrderPDF receives Shopify customer data-request and redaction notifications. For a data request, it makes a private export of currently retained matching app records available to the authenticated merchant, who must download and deliver it to the requester. The app does not email customer exports automatically. Redaction requests remove or redact matching app-held source, document and related production records.
Merchants can review request status and available exports in Privacy requests. Correct order information in Shopify and generate a new document when needed; a previously generated PDF is a saved version of its source at generation time.
Contact and updates
Use the support and privacy contact below for questions about OrderPDF's processing or help with a request. Do not send customer records or PDFs in an initial email. We will update this page and its effective date when the described practices change.