Privacy Policy — COA Suite

Last updated: 23 September 2026

1. Controller

Onur Cirakoglu — Headon, Germany.
Email: hallo@headon.pro
Web: https://headon.pro

2. What the app does

COA Suite generates a certificate of authenticity for matching orders and delivers it to the buyer. Towards the merchant we act as controller for account administration and billing; for the store data the app processes on the merchant's instruction we act as a processor under Art. 28 GDPR. A Data Processing Agreement is available on request at hallo@headon.pro.

3. Data the app processes

• Shop domain and Shopify session tokens — to associate settings and billing with the store and authenticate against the Shopify Admin API. Legal basis: Art. 6(1)(b) GDPR.
• Order data — the app reads the order number, line-item details (product, variant, quantity) and the customer name to decide which certificates to issue (one per purchased unit) and render them. The stored certificate record contains certificate number, product title and ID, variant, edition number (for limited editions), issue date, status, the design used and the order reference (Shopify order ID, line-item ID and order number); the customer name is used only to render the PDF and is not stored.
• Buyer email — used transiently to deliver the certificate PDF and the verification link. It is not stored; delivery logs contain no recipient address.
• Public verification — each certificate has a random, unguessable token. The public /verify page confirms a certificate exists and shows its product title, certificate number and issue date, or that the merchant has revoked it. It does not expose buyer data or the order reference.

4. Where data is stored

On servers operated by Hetzner in Germany. Certificate emails are delivered via Resend. No customer data is sold or used for advertising.

5. Retention and deletion

Issued certificate records are kept so certificates stay verifiable; delivery logs (outcome only, no recipient address) are pruned after the configured retention window. On a Shopify customers/redact request the app processes the orders listed in the request: for every certificate of those orders, the Shopify order ID is replaced by an anonymous placeholder and the order number is deleted, so the certificate can no longer be linked to the order or the buyer. The certificate itself (number, product, variant, edition number, issue date) contains no personal data and stays verifiable. On app uninstall and shop/redact all data for the shop is deleted. You may also request deletion informally at hallo@headon.pro.

6. Sub-processors

Hetzner Online GmbH (hosting, Germany), Resend (transactional email). Shopify Inc. (platform). No other sub-processors receive personal data.

7. Your rights

Under the GDPR you have the right to access, rectification, erasure, restriction, data portability and objection. Contact hallo@headon.pro; we respond within one month.

8. Changes

Material changes are announced in the app at least 30 days in advance. The version published here is authoritative.