Last updated: 13 October 2026
Controller: Universal Exporters LLC, contact support+oss@justarobot.online.
The app prepares the figures for your quarterly One-Stop-Shop (OSS) return from your Shopify orders. For that it stores per order only the order number, destination country, dates and the amounts per VAT rate — no names, addresses, e-mail addresses or payment data.
| Data | Source | Retention |
|---|---|---|
| Order number, destination country (country code only), order, payment, fulfilment and cancel dates, charged currency, VAT class (e.g. OSS, domestic, B2B), whether a VAT ID or tax exemption was present (not the ID itself), net, VAT and gross amounts per VAT rate | Shopify Admin API (read_orders, read_customers for the tax-exempt flag), at install and on every order change |
Until uninstall (deleted 48 h later) |
| Refunds: date, amounts per VAT rate, refund note | Shopify Admin API | Until uninstall |
| Your settings (OSS registration, OSS VAT ID for the PDF header) and quarters marked as filed with their totals | Your input in the app | Until uninstall |
| Shop domain, access token (session) | Shopify | Until uninstall |
| Export log: which file was downloaded for which quarter (counts only, no order data) | App | Until uninstall |
| Access log: when the app read or displayed orders (shop, action, count — no order data) | App | 12 months, deleted with the shop on uninstall |
The order address is read only to determine the destination country; only the country code is stored. Downloaded files are generated on request and not stored.
Art. 6(1)(b) GDPR (contract with the merchant). Where personal data of end customers is involved, the merchant is the controller and we are the processor (Art. 28 GDPR); Shopify's data processing terms for apps apply in addition.
The app runs on Railway in the EU (Netherlands data centre; server and PostgreSQL database). Server error reports are e-mailed to us (Resend) without any shop or customer reference. A daily encrypted (AES-256) database backup is stored with Cloudflare R2 in the EU (EU jurisdiction), kept 7 days. Exchange rates are fetched from the European Central Bank; no shop data is sent. There are no other recipients; no analytics, advertising or tracking services.
On uninstall the session is deleted immediately; 48 hours later Shopify sends shop/redact and all data of the shop is
deleted; it leaves the backups within 7 days after that. Customer requests (customers/data_request, customers/redact) are acknowledged — there is nothing to provide
or erase because no customer data is stored.
Access, rectification, erasure, restriction, portability and objection under Art. 15–21 GDPR; the right to complain to a supervisory authority. Requests to the address above.