Privacy policy

EZ PO Generator, a Shopify app. Last updated 25 August 2026.

EZ PO Generator turns a Shopify order into the paperwork around it — a purchase order for the supplier who fills it, a commercial invoice when it crosses a border, an invoice for the customer, and a quote from a draft order. This policy explains what the app reads, the little it keeps, and how to have that deleted.

Who this policy is from

The app is published by The Crowd Controller, Inc., which is the data controller for the information described below. “We” and “us” throughout this policy mean that company.

What the app reads from your store

The app requests three permissions, all read-only: read_orders, read_products and read_draft_orders. It has no write access and never changes anything in your store — not your orders, not your products, not your inventory.

Shopify shows “View customer data” on the install screen because orders and draft orders carry the customer’s name and address. That is unavoidable for this app: a drop-ship purchase order has to say where the goods go, and an invoice has to say who was billed. It is read to put on the document and, as below, never stored.

Order, draft order and product data is read from Shopify live, each time you open a document, and is not copied into the app’s database. Close the page and nothing of that order remains with us. This includes the customer name and shipping address that a drop-ship purchase order has to carry: they are read, put on the document in your browser, and not retained.

One exception worth stating plainly: when you click Download PDF, the document you are looking at — including that consignee address — is sent to the app’s server so the PDF can be produced there. It is used for that request and written to no database, log or file.

What the app stores

This is the complete list.

• Your session. Your shop’s domain and the access token Shopify issues so the app can call the API on your behalf. Shopify may also supply the installing user’s name and email address with that session.
• Your suppliers. For each: a short code, the supplier name, the terms used to match it against a product’s vendor, an optional contact name, email address and phone number, an optional SKU prefix, and your own notes.
• Your wording rules. The text to match on an order line, and the part number and description to print in its place.
• Your document settings. The business name, address, phone, email and website printed at the top of a document; your logo image; an accent colour; your SKU prefix; standing footer text; which optional blocks print; any extra header rows you have added; and default country of origin and incoterms.
• An access log. Shopify requires apps that read customer data to keep an audit trail, so each time a document is built the app records that it happened: your shop, whether it was an order or a draft order, the order number, the time, and the staff user where Shopify supplies one. It records the act of reading, never what was read — no customer name, address or phone number is written to it. Entries are deleted after 90 days, and with everything else when you uninstall.

Every record is tied to your shop, and one merchant’s data is never visible to another.

What the app does not store

• Your customers’ names, addresses, email addresses or phone numbers
• Your order history, or any copy of an order
• Your product catalogue
• Payment or card details of any kind — billing is handled entirely by Shopify

Where it is held, and who else sees it

The app runs on Railway with a managed PostgreSQL database, hosted in the European Union. Railway is the only third party with access to the stored data, as our hosting provider.

Nothing is sold, rented or shared with anyone else. There is no analytics service, no advertising network and no tracking of any kind in this app. Nothing is sent to a supplier automatically — every purchase order is reviewed and sent by you.

How long it is kept, and how to delete it

Uninstalling the app deletes everything. Shopify notifies us when a shop uninstalls, and 48 hours later every record described above — suppliers, wording rules, settings, logo and session — is erased for that shop. This is automatic and needs nothing from you.

You can also delete individual suppliers and wording rules at any time from within the app, or email us and ask for your data to be erased sooner.

Your rights

If you are in the UK, the EU or a jurisdiction with comparable law, you may request a copy of the data held about you, ask for it to be corrected, or ask for it to be deleted. Write to the address below and we will respond within 30 days.

The app implements Shopify’s mandatory data-protection webhooks. Requests concerning your customers’ data are answered with the fact stated above: this app holds no customer data of its own, because order data is read live from Shopify and never stored.

Changes to this policy

If what the app stores changes, this page changes with it and the date at the top is updated. Material changes will be notified to installed merchants by email.

Contact

Questions about this policy, or a request about your data, go to thecrowdcontroller@gmail.com, or by post to The Crowd Controller, Inc. at the address above. Email reaches us faster.