How Everysale handles your data.
Orders: their line items, shipping, discounts, taxes and refunds. The query the app sends asks for no customer fields — no names, no email addresses, no addresses — because none of them are needed to produce an accounting entry.
The app holds read-only permissions on your store. It cannot create, change or delete anything in Shopify, and does not request permission to.
Webhook notifications from Shopify arrive as raw payloads and are stored so that a failed sync can be replayed rather than lost. Shopify includes the shopper's name, addresses, browser IP and device details in those payloads whether an app wants them or not — so they are removed before anything is written down. The app has never read them: it takes the order number and fetches the order through the API, which returns no customer fields at all.
What is kept from the shopper is a single Shopify customer number, which names nobody by itself and exists so that an erasure request can say who it is about. It, and everything else, goes when a store uninstalls and its 48-hour grace period passes.
Invoices, credit notes and the payments against them, for the organisation you nominate. Nothing else is written, and nothing is deleted except a payment the app itself created and is replacing.
None are read, stored or transmitted. Everysale never sees a card number: Shopify does not expose them, and the app does not ask.
The access tokens Shopify and Xero issue are encrypted before they are written to the database, with a key that is not stored in the same place as the backups. They are used only to make the calls described above.
On a single server rented from DigitalOcean in New York, with the database on the same machine. Backups are kept for fourteen days.
Most of the merchants this app is built for are in the UK, the EU, Australia and New Zealand, so it is worth being plain about what that means: what crosses to the United States is order figures, dates and identifiers. No name, no address, no email, no phone number — none of it is collected in the first place, so none of it is transferred anywhere.
Nobody. Your data is not sold, shared, or used to train anything. It is not sent to any third party beyond Shopify and Xero themselves.
Uninstalling the app in Shopify erases the store's data after Shopify's 48-hour grace period, which exists so that an accidental uninstall followed by a reinstall does not lose your history. To have it erased sooner, write to d.metodiev92@gmail.com.
Everysale is operated by Daniel Metodiev, an individual based in Bulgaria, who is also the contact for any question about data: d.metodiev92@gmail.com. There is no company behind it and no other person with access.