Privacy Policy
Last updated October 15, 2026.
This policy covers the apps published by Itacoa Mídias Digitais ("Itacoa", "we"), including Itacoa: Invoice to Inventory for Shopify (the "App"). It explains what we collect when a merchant installs the App, why, and what happens to it.
What we collect
From your Shopify store
- Your store's myshopify.com address and an access token issued by Shopify, so the App can work on your behalf.
- Product and inventory data the App reads while you use it: product and variant titles, SKUs, barcodes, prices, unit costs, stock quantities and locations.
The App does not request access to your customers, orders or payment information.
From the files you upload
When you upload a supplier invoice or packing slip, the file is sent to Google's Gemini API to read its contents. We keep only what was read from it — supplier name, invoice number and date, totals, and the product lines — so you can review it and see your history. We do not store the file itself. Google processes it under its paid API terms, which do not allow it to be used to train Google's models.
What the App learns
When you receive an invoice, the App remembers which of your products each supplier line corresponds to, so the next invoice from that supplier is matched automatically. This memory belongs to your store only.
How we use it
Only to provide the App: reading invoices, matching lines to your products, updating stock and costs when you confirm, and showing your history. We do not sell data, show ads, or share it with anyone except the service providers below.
Service providers
- Shopify — hosts your store and authenticates the App.
- Google (Gemini API) — reads uploaded invoice files.
- Cloudflare — network and security for our servers.
- Hostinger — hosts the server and database where App data is stored.
Retention and deletion
- Invoice history and supplier matches are kept while the App is installed, so you can look back at what was received.
- When you uninstall the App, Shopify notifies us and we delete all of your store's data within 48 hours.
- You can delete any single invoice at any time from inside the App, or ask us to delete everything by writing to support.
Your rights
Depending on where you are, you may have the right to access, correct, export or delete personal data, and to object to its processing — including under the GDPR, the CCPA and Brazil's LGPD. Write to support@itacoa.tech and we will answer within 30 days. Requests Shopify forwards to us on behalf of your customers are handled the same way; since the App does not access customer data, there is usually nothing to return.
Security
Data is sent over encrypted connections, our servers accept no direct connections from the internet, and access is limited to the people who operate the App.
Changes
If we change this policy in a way that matters, we will update the date above and tell you inside the App.
Contact
Itacoa Mídias Digitais, Brazil — support@itacoa.tech