Last Updated:
For the purposes of the GDPR and CPRA, HJB CodeForge acts as a Data Processor. The Merchant is the Data Controller. We process data solely to fulfill the Merchant's instructions (generating invoices).
We collect and store the following data to provide invoicing services:
Note: We DO NOT store credit card numbers, bank account numbers, or sensitive payment tokens. All payment processing is handled strictly by Shopify.
Active Retention: We retain invoice and customer records for the duration of your installation to maintain your financing history and reports.
Uninstallation: Upon uninstallation of the App, your data is marked for deletion. We retain a backup for 30 days to allow for data recovery in case of accidental uninstallation. After 30 days, all personal data is permanently deleted.
GDPR/CCPA Requests: If we receive a mandatory "Shopify Redact" request (GDPR/CCPA), relevant personal data will be deleted within 48 hours, overriding the standard retention period.