Privacy Policy

Effective date: August 26, 2026

Parchio is operated by Alessio Coccia ("we" or "us") and provides tools that let Shopify merchants create, download, and send invoice documents. This policy explains how we process information when merchants use the app.

Information we process

To provide invoice features, we receive the Shopify store information and order information selected by the merchant. This can include order numbers, dates, products, quantities, prices, taxes, shipping charges, payment status, fulfilment details, and customer names, email addresses, phone numbers, and billing or shipping addresses when those fields are included in an invoice template.

We also process merchant-provided template settings, business details, logos, export history (such as order names, file format, and time of export), and support requests. When a merchant uses Delivery, the recipient email address, message, and generated invoice attachment are sent to our email-delivery provider to complete that request.

How we use information

We use this information only to authenticate the app, generate invoice files, send requested delivery emails, retain the merchant’s template settings and activity history, provide support, maintain security, and comply with legal obligations. We do not sell customer or merchant personal information, use it for advertising, or use it to build unrelated profiles.

Storage and service providers

Parchio is hosted using Render and stores app settings, sessions, and activity records in Neon. Email deliveries are handled through Resend. Generated invoice data is processed when an export or delivery is requested; the app does not retain the generated PDF or ZIP after the request finishes.

Retention and deletion

We retain merchant settings while a merchant keeps the app installed. Activity records and security audit records are retained for up to 180 days. When Shopify sends an app-uninstall or shop-redaction request, we delete the shop’s app sessions, settings, templates, export records, and security audit records. Customer and order data used to generate an invoice is not retained as a separate customer or order database. When Shopify sends a customer-redaction request, we remove a matching recipient email from delivery history.

Security

We use access controls, encrypted service-provider infrastructure, restricted secrets, data minimization, and protected-data audit records designed to protect the information we process. Generated PDFs and ZIP files are streamed for the requested export or delivery and are not stored after the request finishes. Read our Security and data protection practices for more detail. No method of electronic storage or transmission is completely secure, so we cannot guarantee absolute security.

Merchant responsibilities

Merchants are responsible for ensuring their use of Parchio, including sending invoices and email attachments to recipients, complies with their own privacy, tax, and consumer-protection obligations.

Contact

For privacy questions or requests, contact info@alessiococcia.com.