Privacy policy

Borderdesk · last updated 23 October 2026

Borderdesk is a Shopify app that keeps customs data on products and prints customs documents for orders. It is run by Yuri Fernandes de Oliveira. This policy says what the app reads and stores, why, and for how long.

Who decides what happens to the data

The merchant who installs the app decides which orders to print. For their customers' data, the merchant is the controller and the app is a processor working on their instructions. Customers who want to see or delete their data should ask the merchant; the app carries out these requests when Shopify passes them on.

What the app reads from Shopify

• Products and variants: titles, SKUs, weights, HS codes, countries of origin and customs descriptions.
• Orders from the last 60 days: line items, prices, discounts, taxes, shipping, and the shipping address, name, phone and email of the customer, because customs documents must show who the parcel is for.
• When the merchant allows it, the VAT number of business buyers that order through Shopify B2B.
• The shop's name, address and locations, to fill in the sender.

What the app stores

• The merchant's settings: sender address, tax numbers, logo and signature.
• A copy of each product's customs data, to filter it quickly.
• Every printed document, including the customer's name, address, phone, email and VAT number as printed, so a reprint matches the original.
• VAT numbers the merchant types for an order.
• HS codes merchants save, with the product description they were saved for. These are shared between shops to suggest codes, without the shop's name: only a one-way code that tells shops apart. They're deleted when the shop's data is deleted.

The app doesn't sell data, use it for marketing or advertising, or build profiles of customers.

Services the app uses

• Amazon Web Services, for hosting and the database, in Ireland.
• Sentry, for error reports. Reports contain no request data, so no customer names or addresses.
• OpenRouter or Anthropic, to suggest HS codes. Only product data is sent, never customer data.
• The UK Trade Tariff service and the European Central Bank, for tariff codes and exchange rates. No shop or customer data is sent.

How long data is kept

• While the app is installed, printed documents are kept so they can be reprinted.
• When Shopify asks the app to delete a customer's data, their name, address, phone, email and VAT number are removed from every stored document. Amounts and document numbers stay for the merchant's records.
• 48 hours after the app is uninstalled, Shopify asks the app to delete the shop's data, and everything is deleted, including all documents. Database backups roll over within 7 days.

Security

Data is sent over HTTPS and stored in a database that isn't reachable from the internet. Only the operator has access, for support and maintenance.

Contact

For questions about this policy or a request about your data, write to support@borderdesk.eu.