SoftStudioX InstaPay Payment — privacy

This app helps a Shopify merchant review customer-submitted transfer evidence. It does not connect to your bank, receive money, or verify transfers automatically.

Data and purpose

We collect your Shopify order ID and order reference from the confirmation or order status page (or a claimed order reference on the earlier standalone form), phone number and/or InstaPay username, and an optional screenshot to help the merchant match a payment and identify your submission. Screenshots may contain financial or personal information: crop them before uploading. The app also stores the merchant’s Shopify store identity, receiving address and installation credentials.

Access, storage and deletion

Your evidence is encrypted in the app database and sent over HTTPS. Only the authenticated store merchant can view it. Evidence is deleted within 30 days, or earlier when the merchant deletes it, the app is uninstalled, or Shopify sends a customer redaction request. Because evidence is not mapped to verified Shopify customer IDs, a customer redaction request removes all evidence for that store. The merchant’s bank and Shopify order records are outside this app.

Your rights

Contact the store that sold you the order for access or deletion of your evidence. Shopify customer data requests are shown to the merchant for fulfillment. This app does not sell evidence or use it for advertising or AI training.

App subscriptions

When paid plans are enabled, Shopify manages merchant subscriptions and charges. We query Shopify for the store’s current plan and subscription period; we do not collect card details. A store-level monthly submission counter prevents allowance bypass by deleting evidence. This counter contains no buyer details and is removed within 32 days after the month ends. Cached plan data is removed on uninstall.

Operations

We keep abuse-prevention counters for up to one day using a keyed hash of the submitting IP address. We retain webhook delivery identifiers for 30 days to prevent duplicate processing. Logs contain event names, timestamps and error codes, not receipt contents. Encrypted server backups run every six hours and expire after 12 hours, with hourly cleanup. A restored backup must be purged before service resumes.

Merchant agreement

We record the store, accepted terms version and acceptance time until uninstall. New buyer submissions require the merchant’s acceptance. The primary server and local encrypted database/backups are hosted on DigitalOcean infrastructure in Frankfurt, Germany; this is not a promise that every provider support operation or merchant access stays in that region.

App operator: SoftStudioX. App support: softstudix@gmail.com