Privacy Policy

1. Introduction

This Privacy Policy describes how Settly - Payout Reconciliation ("we", "our", or "the App"), operated by NVDS AS, collects, uses, and protects information when you use our Shopify application.

By installing and using the Settly - Payout Reconciliation app, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Order Data

To perform reconciliation between Vipps settlement reports and your Shopify orders, we access the following order information through the Shopify Admin API:

• Order ID and order name/number
• Order creation date
• Order total amount and currency
• Financial status (paid, pending, etc.)
• Payment transaction IDs

We do NOT collect or store:

• Customer names or contact information
• Customer email addresses
• Shipping or billing addresses
• Customer phone numbers
• Product details or line items

2.2 Settlement Report Data

When you upload a Vipps settlement report (CSV or Excel file), we process:

• Transaction IDs and Order IDs
• Sales dates and settlement dates
• Transaction amounts (gross, fee, net)
• Currency information

2.3 Shop Information

We store minimal shop information required for authentication:

• Shop domain (myshopify.com URL)
• OAuth access tokens (encrypted)

2.4 Debug Reports

If you generate a debug report for support, we process:

• Technical app logs and error codes
• Configuration settings (Date Window, plans)
• Aggregated reconciliation statistics (match rates)

Debug reports do NOT contain any customer data, specific order IDs, or financial amounts.

3. How We Use Your Information

We use the collected information solely for:

• Reconciliation: Matching Vipps settlement transactions with your Shopify orders
• Report Generation: Creating reconciliation reports that you can download
• Authentication: Verifying your identity and maintaining your session

We differentiate between essential service communications and marketing communications. See Section 3 for details.

3. Communications & Marketing

3.1 Service Communications

We may send you critical application notifications regarding:

• Security alerts
• Billing and subscription updates
• Critical technical issues affecting your account

These are considered essential service communications, and you cannot opt out of them while the app is installed.

3.2 Marketing Communications

With your explicit consent (via the checkbox in App Settings), we may send you emails regarding:

• New feature announcements
• Tips for improving reconciliation
• Special offers and promotions

You can withdraw your consent for marketing communications at any time by unchecking the option in the App Settings or by contacting support.

4. Data Storage and Retention

4.1 Processing Model

The Vipps Reconciliation app operates on a process-only model:

• Order data is fetched from Shopify only during active reconciliation
• Uploaded settlement files are processed in memory and not stored permanently
• Reconciliation results are generated and provided to you immediately
• No order data is retained after your session ends

4.2 Session Data

We store OAuth session tokens to maintain your authenticated connection to Shopify. These tokens are:

• Encrypted at rest
• Automatically invalidated when you uninstall the app
• Not shared with any third parties

5. Data Security

We implement appropriate security measures including:

• HTTPS encryption for all data transmission
• Encrypted storage for sensitive credentials
• Secure OAuth 2.0 authentication with Shopify
• No storage of unnecessary personal data

6. Data Sharing

We do not sell, trade, or otherwise transfer your information to third parties. Your data is only accessed through the Shopify API and processed locally within the app.

We may disclose information only if required by law or to protect our rights.

7. Your Rights

You have the right to:

• Access: Request information about what data we process
• Deletion: Uninstall the app to remove all stored session data
• Portability: Download reconciliation reports in Excel format
• Withdraw Consent: Uninstall the app at any time

8. GDPR Compliance

For users in the European Economic Area (EEA), we comply with the General Data Protection Regulation (GDPR). The legal basis for processing your data is:

• Contract Performance: Processing is necessary to provide the reconciliation service you requested
• Legitimate Interest: Maintaining security and preventing fraud

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

10. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

NVDS AS
Solbergveien 18
1337 Sandvika, Norway

Email: support@settly.no
Subject: Privacy Inquiry - Settly