Privacy Policy
OrderBridge · Last updated 7 October 2026
OrderBridge is a Shopify app that sends a store's orders to the store's own Xero organisation as sales invoices. This policy explains what information the app handles, why, and how it is protected. It applies to merchants who install OrderBridge and to their customers whose order details pass through the app.
Who is responsible for the data
The merchant who installs OrderBridge decides which orders are sent to Xero and is the controller of their customers' personal information. OrderBridge processes that information only on the merchant's behalf, to provide the sync service.
Information we access
- Store details: the shop's myshopify.com domain, Shopify shop ID, granted access scopes, and plan/subscription status.
- Order details: order number, dates, line items, SKUs, prices, discounts, shipping, taxes, currency and status.
- Customer details on those orders: name, email address, phone number, and billing and shipping address, used to create or match the Xero contact on the invoice.
- Xero connection details: the connected Xero organisation ID and the OAuth tokens needed to create invoices.
- Settings you enter: Xero account codes, tax and invoice settings, and any customer-to-Xero-contact mappings you save.
OrderBridge requests read-only access to orders and customers in Shopify. It does not access payment card details, and it does not use cookies or tracking for advertising or analytics.
How we use it
- To create, update or void the matching invoice and contact in the merchant's connected Xero organisation.
- To show sync status, failures and history in the app, and to retry failed orders.
- To avoid creating duplicate invoices for the same order.
- To check whether the store has an active OrderBridge plan through Shopify billing.
We do not sell personal information, share it for advertising, or use it for any purpose other than providing the app.
Who we share it with
- Xero: order and customer details are sent to the Xero organisation the merchant connects. Xero handles that data under its own privacy policy and the merchant's agreement with Xero.
- Shopify: the app runs inside Shopify admin and uses Shopify's APIs and billing.
- Infrastructure providers: our cloud hosting and database providers store the data described here on our behalf and are not permitted to use it for anything else.
How long we keep it
- Raw order webhooks and finished sync jobs, which contain full order and customer details, are deleted automatically after 30 days.
- A short sync record per order (order number, Xero invoice ID and number, status) is kept while the app is installed so the same order is never invoiced twice.
- When the app is uninstalled, its Shopify and Xero access tokens are deleted and the Xero connection is revoked straight away. Shopify then asks us to erase the store's data 48 hours later, and we delete all remaining records for that store.
- When Shopify forwards a customer erasure request, we delete that customer's contact mapping and remove their details from stored orders.
How we protect it
- All traffic to and from OrderBridge, Shopify and Xero uses HTTPS.
- Shopify and Xero access tokens are encrypted at rest with AES-256-GCM.
- Requests from the app are verified with Shopify session tokens, and webhooks are verified with Shopify's HMAC signature.
- Access to production systems is limited to the people who operate OrderBridge.
Your rights
Customers can ask the merchant they bought from to access, correct or delete their information; Shopify passes those requests to us and we act on them. Merchants can disconnect Xero at any time from the app and can uninstall the app to have their store's data deleted as described above. Merchants can also contact us directly to request a copy or deletion of their data.
Changes
If we change how OrderBridge handles data, we will update this page and the date at the top.
Contact
Questions or requests about privacy: admin@multiops.com.