Who we are
InstaProof is a Shopify app that lets buyers upload a payment receipt for orders paid by manual methods (such as InstaPay, mobile wallets or bank transfer), and lets the merchant review it. This policy explains what the app handles for merchants who install it and for buyers who use it. Contact: support@instaproof.app.
Information about merchants
When you install InstaProof on your store we store:
- Your store's domain, name, contact email and country, read from Shopify.
- The access credentials Shopify issues to the app, encrypted.
- Your plan and how many orders received a receipt in the current month.
Your payment instructions and settings are stored in your own Shopify store, not in our database.
Information about buyers
When a buyer uploads a receipt:
- The receipt file is saved to the merchant's own Shopify Files and linked to the order. We do not keep a copy on our servers.
- The file name, size, upload time, review status, any decline reason and the buyer's answers to the merchant's questions are saved on the order in Shopify.
- To show the upload page we read the order's number, items and total from Shopify at that moment. We do not store them.
We do not collect buyers' names, addresses, emails or phone numbers, and we do not process payments. A receipt may itself contain personal or financial details; the merchant is responsible for how they use it.
Receipt links
Each order has a receipt link the merchant can share. Anyone with the link can see that order's summary and the merchant's payment instructions. The uploaded receipt is shown in full only while it is awaiting review or was declined, and only for 72 hours after upload; after that the page shows a small thumbnail or the file name.
Technical data
Our servers process IP addresses to limit abuse (for example, too many uploads from one address) and keep short-lived technical logs. The upload page uses one strictly necessary cookie for security. We use no advertising or analytics trackers.
Who we share data with
Shopify, which hosts the store, the orders and the uploaded files; and the infrastructure providers that run our servers and deliver this website. We do not sell personal information.
Keeping and deleting data
- When a merchant uninstalls the app, the store's access credentials are deleted. A minimal record of the store's domain and usage counter is kept so that reinstalling does not reset the free monthly limit.
- 48 hours after uninstall, Shopify asks us to erase the store's data; we then remove the store's name, email and country from that record.
- Receipts and order information stay in the merchant's Shopify store and follow the merchant's own retention.
Your rights
Buyers who want access to, or deletion of, a receipt should contact the store they bought from; the store controls that data. Merchants and buyers can also write to support@instaproof.app. We respond to Shopify's customer data requests and redaction requests.
Changes
We will update this page when the policy changes and note the date at the top.