NF / Privacy / Shopify

Narrowforge Intrastat Europe — Privacy policy

Scope and product boundary

This policy explains how Narrowforge Intrastat Europe, the Shopify app operated by NarrowForge, handles information when it is installed on a Shopify store. The app prepares dispatch data for a merchant's reporting workflow; it does not submit declarations to an authority, decide whether a merchant must file or provide tax advice.

Information received from Shopify

The app requests only the Shopify resources needed to build and review dispatch lines. That can include:

Store domain, installation context and the Shopify identifiers needed to scope the tenant.
Order and fulfilment identifiers and names, creation and fulfilment dates, currency and refund identifiers.
Shipping destination country code and fulfilment location identifiers.
Line-item and product or variant identifiers, titles, SKU, quantity, shipping requirement, gift-card flag and weight where Shopify provides them.
Discounted line values used to calculate the review totals.

The app does not request or persist customer names, email addresses, telephone numbers or street-address lines. The destination country code is used for dispatch classification; it is not a customer profile.

Information entered or derived

A merchant can enter reporting configuration such as the reporting country, VAT or tax identifiers, legal name and address, location mappings, transport defaults, CN8 codes, country of origin, net mass, supplementary quantities, counterparty VAT details and threshold confirmations. The app derives movement status, reporting period, calculated values, issue messages, declaration snapshots, export file hashes, audit events and job status from that source data and configuration.

Purpose and use

We use this information to authenticate the installation, synchronise Shopify data, classify eligible dispatches, identify missing or inconsistent fields, prepare a jurisdiction-specific export, preserve a reviewable period history, verify the Shopify plan and provide support. We do not sell customer data or use it for advertising.

Storage, isolation and security

Operational records are stored in the application's PostgreSQL database and Shopify session records are stored through the managed Shopify session adapter. Every merchant record is scoped to its Shopify store identifier. OAuth tokens are used server-side and are never placed in an export or a public page. Finalized exports are served only through an authenticated route after the stored artifact and declaration hashes have been checked. App and webhook traffic uses HTTPS.

Service providers

Shopify provides the store platform, authentication, Admin API and marketplace billing used by the app.
NarrowForge's infrastructure provider hosts the Narrowforge Intrastat Europe web process, worker and managed PostgreSQL service. The active provider and storage region follow the deployment configuration for the release.
Support delivery uses the support mailbox or ticketing webhook configured by NarrowForge. A support request should contain only the period, a safe reference and a description; never include passwords, API keys or access tokens.

No advertising or third-party analytics service is part of the app's documented data flow. If that changes, this page will identify the provider and purpose before the change takes effect.

Retention, deletion and rights

Retention follows the operational policy for the product. Shopify sessions and access tokens last until expiry or uninstall; product-profile import previews expire after 15 minutes; completed or failed job, sync and webhook metadata is cleaned after 90 days. Movements, product profiles, configuration and finalized reporting history remain while the store needs them to use the service. Shopify's shop/redact event or a verified deletion request removes the tenant and its cascading records. You can request deletion or ask about access and correction through the data deletion page or the support form. Contact: support@narrowforge.com.