Privacy Policy — B2B Credit & Receivables

Last updated: 14 August 2026

1. Controller

Onur Cirakoglu — Headon, Germany.
Email: hallo@headon.pro
Web: https://headon.pro

2. What the app does

B2B Credit & Receivables lets wholesale merchants track credit limits, accounts-receivable aging and payment reminders per company account. Towards the merchant we act as controller for account administration and billing; for the store data the app processes on the merchant's instruction we act as a processor under Art. 28 GDPR. A Data Processing Agreement is available on request at hallo@headon.pro.

3. Data the app processes

• Shop domain and Shopify session tokens — to associate settings and billing with the store and authenticate against the Shopify Admin API. Legal basis: Art. 6(1)(b) GDPR.
• Order data — from order webhooks the app reads the numeric customer id, order id, amounts, currency and payment terms to attribute orders to a credit account and compute aging. It does not read or store customer names, addresses, phone numbers or email addresses from order data.
• Billing contact — an email address the merchant enters themselves for each account, used solely to send that account's payment reminders. It is not taken from customer data.

4. Where data is stored

On servers operated by Hetzner in Germany. Payment-reminder emails are delivered via Resend. No customer data is sold or used for advertising.

5. Retention and deletion

Receivable and account records are kept while the app is installed. On a Shopify customers/redact request the app removes the link to that customer id; on app uninstall and shop/redact all data for the shop is deleted. You may also request deletion informally at hallo@headon.pro.

6. Sub-processors

Hetzner Online GmbH (hosting, Germany), Resend (transactional email). Shopify Inc. (platform). No other sub-processors receive personal data.

7. Your rights

Under the GDPR you have the right to access, rectification, erasure, restriction, data portability and objection. Contact hallo@headon.pro; we respond within one month.

8. Changes

Material changes are announced in the app at least 30 days in advance. The version published here is authoritative.