TrueLanded

Privacy policy

Last updated 3 November 2026.

TrueLanded is a Shopify app that works out the landed cost of imported products, writes it to Shopify, posts matching journals to Xero, and reports true margin per product. This policy explains what data the app handles when a merchant installs it, why, where it is kept, and how it is deleted. Questions go to support@truelanded.com.

What we collect

  • Store details from Shopify: the store's domain and an access token for the Shopify API.
  • Product data: product and variant titles, SKUs, weights, inventory quantities and cost per item, read from and written to Shopify.
  • Shipments and invoices the merchant enters or uploads: supplier, freight and broker invoices (PDF or image files), the values read from them, and the shipments and cost changes made from them.
  • Order line items, for the margin report: products, quantities, prices, discounts, refunds and dates. We do not read customer names, email addresses, phone numbers or addresses, and order data is not stored. The report is calculated each time it's opened.
  • Xero connection, if the merchant connects Xero: OAuth tokens (encrypted at rest), the organisation name, the chart of accounts and tracking categories, and the journals we post.
  • Usage counts: how many invoices were read each month, for plan limits.

How we use it

Only to provide the app's features to the merchant who installed it: calculating landed cost, updating cost per item in Shopify, posting journals to Xero when the merchant confirms them, reporting margin, and applying plan limits. We don't sell data, use it for advertising, or share it with anyone except the service providers below.

Service providers

  • Vercel runs the app, in Sydney, Australia.
  • Supabase hosts the database and invoice files, in Sydney, Australia.
  • Inngest runs background jobs (reading invoices, talking to Xero). Job records hold store domains and record IDs, not invoice contents or tokens. Inngest processes them in the United States.
  • An AI model provider reads uploaded invoice files through its API to extract the invoice values. Files are sent only when the merchant uploads them for reading.
  • Shopify and Xero, whose APIs the app uses on the merchant's behalf.

Security

Data travels over HTTPS. Invoice files are kept in a private storage bucket, and Xero tokens are encrypted. Every record is tied to one store, and the app only shows a store its own data.

Retention and deletion

  • When a merchant uninstalls the app, their Shopify sessions are deleted and their Xero connection is released straight away.
  • 48 hours after uninstall, Shopify asks us to erase the store's data. We then delete everything we hold for that store: shipments, invoices and their files, Xero settings and journals, usage counts and settings.
  • Because we don't store customer data, requests from a store's customers to see or erase their data have nothing for us to return or delete. We still acknowledge them.
  • A merchant can ask us to delete their data sooner by writing to support@truelanded.com.

Your rights

Merchants can ask what data we hold about their store, ask for it to be corrected, or ask for it to be deleted, by writing to support@truelanded.com. We handle personal information in line with the Australian Privacy Principles. If you're not satisfied with our response, you can contact the Office of the Australian Information Commissioner (oaic.gov.au).

Changes

We'll update this page when the app's data handling changes, and change the date above.