Privacy Policy — COA & License PDF

Last updated: 14 August 2026

1. Controller

Onur Cirakoglu — Headon, Germany.
Email: hallo@headon.pro
Web: https://headon.pro

2. What the app does

COA & License PDF generates a certificate of authenticity for matching orders and delivers it to the buyer. Towards the merchant we act as controller for account administration and billing; for the store data the app processes on the merchant's instruction we act as a processor under Art. 28 GDPR. A Data Processing Agreement is available on request at hallo@headon.pro.

3. Data the app processes

• Shop domain and Shopify session tokens — to associate settings and billing with the store and authenticate against the Shopify Admin API. Legal basis: Art. 6(1)(b) GDPR.
• Order data — the app reads the order number, line-item details and the customer name to decide which certificate to issue and render it. The stored certificate record contains certificate number, product title and issue date; the customer name is used only to render the PDF and is not stored.
• Buyer email — used transiently to deliver the certificate PDF and the verification link. It is not stored; delivery logs contain no recipient address.
• Public verification — each certificate has a random, unguessable token. The public /verify page confirms a certificate exists and shows its product title and issue date. It does not expose buyer contact data.

4. Where data is stored

On servers operated by Hetzner in Germany. Certificate emails are delivered via Resend. No customer data is sold or used for advertising.

5. Retention and deletion

Issued certificate records are kept so certificates stay verifiable; delivery logs are pruned after the configured retention window. On a Shopify customers/redact request the app removes buyer data it holds; on app uninstall and shop/redact all data for the shop is deleted. You may also request deletion informally at hallo@headon.pro.

6. Sub-processors

Hetzner Online GmbH (hosting, Germany), Resend (transactional email). Shopify Inc. (platform). No other sub-processors receive personal data.

7. Your rights

Under the GDPR you have the right to access, rectification, erasure, restriction, data portability and objection. Contact hallo@headon.pro; we respond within one month.

8. Changes

Material changes are announced in the app at least 30 days in advance. The version published here is authoritative.