Privacy policy of the Kigo.Cloud Fiskalizacija Shopify app

Last updated: 27 October 2026

Who processes the data

The Shopify app Kigo.Cloud Fiskalizacija is published by Symmetria d.o.o., Zagreb, Croatia. Contact: [email protected]

What the app does

The app connects a Shopify store to the merchant's Kigo.Cloud account. When an event the merchant selected in the app happens (order created, paid, fulfilled, updated or cancelled), Kigo.Cloud issues a fiscalized invoice for that order, and a cancellation invoice for a cancelled order. Merchants on the Business plan can also turn on syncing of products, stock and collections between Kigo.Cloud and Shopify.

For the store's customers and their data, the merchant is the controller and Symmetria d.o.o. is the processor, processing the data only to issue invoices and keep products in sync.

Data the app accesses

• Orders: order number and date, line items, prices, discounts, tax, shipping, payment method and status. Needed for the invoice.
• Customer data on the order: name, company, email, billing address and shipping address. Printed on the invoice as invoicing rules require; the email is used to send the customer their invoice when the merchant has turned this on.
• Products, inventory, locations and discounts: only when a Business merchant turns on syncing and explicitly grants these permissions in Shopify.

The app does not access card payment details, customer passwords or customer accounts beyond the order.

What the app stores and where

• About the store: the store address (myshopify.com), the linked Kigo.Cloud account, the selected events, the granted permissions and the install date. Shopify access tokens are stored encrypted.
• Invoices and customers: issued invoices and the customer data on them are stored in the merchant's Kigo.Cloud account, like any other invoice the merchant issues. The merchant can view, print and export them in Kigo.Cloud.

Data is processed on Kigo.Cloud servers and transferred only over encrypted connections (HTTPS).

Who receives the data

• The Croatian Tax Administration, when an invoice is fiscalized, to the extent required by the fiscalization law.
• The e-invoice intermediary, only when the merchant sends e-invoices to business customers.
• The customer, by email with their invoice, when the merchant has turned this on.

We do not sell the data, use it for advertising or share it with anyone else. The app has no analytics or tracking tools.

How long the data is kept

Issued invoices are accounting documents and are kept in the merchant's Kigo.Cloud account for the periods required by law. An issued invoice is never changed or deleted; it is corrected with a cancellation invoice.

When the merchant uninstalls the app, the link to the store ends and the access tokens stop working. When Shopify asks for the store data to be erased 48 hours after uninstall, we delete all store data the app holds. Invoices already issued in Kigo.Cloud remain with the merchant.

Customer requests

When a store customer asks through Shopify to see or erase their data, we answer within 30 days. Data on issued invoices that the law requires to be kept is not deleted before the legal period ends; everything else is deleted.

Your rights

You can exercise your rights of access, rectification, erasure, restriction and portability by writing to [email protected]. If you are a customer of a store, you can also contact the merchant you bought from. You have the right to lodge a complaint with the Croatian Personal Data Protection Agency (azop.hr).

Security

How we protect data and what we do in a security incident is described in our data security and incident response policy.

Changes

Material changes to this policy will be published on this page with a new date at the top.