Legal
Lisive eInvoice Privacy Policy
Last updated: 11 October 2026
Lisive eInvoice is a Shopify app published by Lisive. It issues Vietnamese electronic (VAT) invoices for a store's orders through the licensed eInvoice provider the merchant connects, and records the result on the order in Shopify. The app has one paid plan with a free trial, billed through Shopify.
1. Information We Collect
- Store information. The Shopify shop domain, the access token Shopify issues to the app, the granted scopes, the install and uninstall timestamps, the store's plan and billing status, and the number of invoices issued in the current month.
- Invoice settings. What the merchant enters to issue invoices in the store's name: the seller's tax code, legal name, address, phone and email, the invoice template and series, tax and shipping settings, and the automation rules.
- eInvoice provider account details. The login the merchant uses with their eInvoice provider. It is used only to connect to that provider, is never shown back in the app and is never written to logs.
- Order data read from Shopify. When an invoice is issued, the app reads the order's line items, prices, taxes, discounts, shipping, billing and shipping address, and the buyer's name and contact details. This is held in memory for that request only. Only the invoice record below is kept.
- Invoice details from buyers. A buyer can enter a company name, tax code, buyer name, email and address in the invoice request form on the storefront, after checkout, or in their customer account. Store staff can also enter these details in the Shopify admin or on Shopify POS. The details are saved on the order in Shopify.
- Invoice records. One record per invoiced order: the order ID and number, the invoice number, status, total amount, a link to the invoice PDF, and the buyer's name, email, phone number and address as printed on the invoice.
- Company lookups. When a buyer types a company tax code, the app looks up the company's registered name and address so the buyer does not have to type them. Only the tax code is used, and the result is public business registration data.
- Diagnostic information. Application logs and error reports containing identifiers, codes, timings and error messages. Never buyer names, emails, phone numbers, addresses or tax codes.
2. How We Use It
Data is used only to issue, adjust and track electronic invoices for the store's own orders, to show the merchant their invoices in the app, and to bill the subscription. It is used for no other purpose, and it is never combined with data from any other store or any other source.
Invoices are issued only when the merchant issues one, or when an order matches the automation rules the merchant has turned on. Nothing is issued while automation is off.
The app reads products only to build invoice line items, and themes and store languages only to check that the storefront form is enabled and to show it in the store's languages. Customer access is used only to fill in the buyer on an invoice and to save a signed-in buyer's invoice details for next time. The app does not request payment details.
We do not sell data and do not use it for advertising or profiling.
3. What the App Changes on the Store
- It adds the invoice status, invoice number, issue date and a link to the invoice PDF to the order as custom attributes. Existing attributes on the order are kept.
- It saves a signed-in buyer's invoice details on that customer in Shopify, so the form is filled in next time. Only that buyer sees them.
- It saves the look and wording of the storefront form on the store. This contains no personal data.
The app never modifies an order's line items, prices, addresses or customer, and never modifies products.
4. Retention and Deletion
| Data | Kept for |
|---|---|
| Order data read from Shopify | Only for the duration of the request |
| eInvoice provider account details | Until the app is uninstalled, then deleted immediately |
| Invoice records | Until the shop redaction request after uninstall |
| Invoice settings | Until the shop redaction request after uninstall |
| Store record | Until the shop redaction request after uninstall |
| Company lookups | 30 days, then refreshed |
On uninstall, the provider account details are deleted, the subscription ends, and the app stops making any API call on the store's behalf. The access token stops working the moment the app is uninstalled. When Shopify sends the shop redaction request, about 48 hours after uninstall, the app deletes the store's record, settings and invoice records.
Invoices already issued stay with the eInvoice provider and in the merchant's own records, as Vietnamese accounting law requires. Information already added to orders stays with those orders and is managed by the merchant.
5. Subprocessors
- The merchant's eInvoice provider. Receives the seller details, the buyer details, the line items and the amounts needed to issue the invoice, and reports the invoice to the tax authority as Vietnamese law requires.
- Infrastructure and service providers that host, secure and support the app.
- Shopify. Provides the store data and handles subscription billing.
No buyer data is sent to any other service.
6. Security
- All data is encrypted in transit. Every connection between Shopify, the app, the eInvoice provider and our service providers is encrypted.
- All data is encrypted at rest. Everything the app stores, including store information, invoice settings and invoice records, is encrypted where it is stored.
- eInvoice provider account details get an additional layer of encryption and are only decrypted at the moment the app connects to the provider.
- Access is restricted. Only authorized systems and personnel can access merchant data, and each store can only access its own data.
7. Your Rights
Merchants can request access to, correction of, or deletion of the data the app holds about their store by emailing hello@lisive.com.
Shopify's mandatory compliance webhooks are handled as follows. A shop redaction request deletes all of the store's data automatically, with no manual step. A customer redaction request erases the buyer's name, email, phone number and address from the invoice records of that buyer's orders, and deletes the buyer's saved invoice details, automatically. A customer data request is acknowledged automatically and answered by a person within the 30 days Shopify allows.
8. Changes
Material changes update the date at the top of this page. Merchants are notified by email at the address on file with Shopify when a change affects how data is handled.
9. Contact
Lisive eInvoice is published by Lisive.