MasterKasa app Privacy Policy

Master Development S.R.L. (hereinafter “Master Development”, “We”) aims to maintain the confidentiality and security of personal data and other information that We obtain from users of our MasterKasa app (hereinafter the “Service”). Each user of the Service must read this Privacy Policy (hereinafter the “Policy”, “Privacy Policy”).

If You (hereinafter “You”, “User”, “Merchant”) want to use the Service, You must fully and unconditionally accept all the terms of this Privacy Policy before using the Service.

The Service is a Shopify app available for remote use through the web site https://shopify.com/ and/or any other Shopify domains.

1. General provisions

1.1. This Privacy Policy informs you of the way we collect, store, modify, use, and protect your personal data and other confidential information received from the users of the Service.

1.2. By using the Service, you agree to the terms of this Policy and authorize Master Development to receive, store, process, and use your personal data and other information that Master Development receives while You use the Service, in accordance with this Privacy Policy.

1.3. Master Development does not collect information on individuals who have not reached the age of 13, and in this regard you are not allowed to use any personal data or other information of such individuals within the Service.

1.4. This Privacy Policy does not regulate the receipt, storage, processing, use, and disclosure of your personal data by third parties — companies and organizations that are not in our possession or under our control, as well as by individuals who are not Master Development employees — even if You receive access to web sites, goods, or services of these parties through the Service.

1.5. Master Development may change this Policy from time to time by updating this page; you should check this page from time to time to ensure that you consent to any changes.

2. What the Service does

2.1. The Service issues Ukrainian fiscal receipts for orders placed in your Shopify store through a software registrar of settlement operations (ПРРО). Receipts are created, signed, and transmitted to the State Tax Service of Ukraine through MasterKit Kasa, a fiscal service operated by Master Development.

2.2. The Service also prepares and files, on your behalf and with your qualified electronic signature, the tax forms required to operate a software registrar of settlement operations: 20-ОПП (the business unit), 1-ПРРО (registration of the registrar itself), and 5-ПРРО (the qualified certificate of the cashier’s electronic signature or of the electronic seal that signs the receipts).

2.3. Issuing a fiscal receipt is a legal obligation of the Merchant under the laws of Ukraine. Processing the data listed in section 3 is therefore necessary both to perform our agreement with You and to comply with that obligation.

3. Information that we collect, store, and process

3.1. Store and account data. Your myshopify.com domain, store name, currency, time zone, country, store address, the store owner’s name, and the contact e-⁠mail address of the store. We receive this data from Shopify when the Service is installed and when your store profile changes.

3.2. Order data. Order number and date, line items (title, SKU, barcode, quantity, price, discounts, taxes), shipping lines, payment gateways and transactions, refunds, fulfilment events, order totals, and — for orders in a foreign currency — the exchange rate applied. This data forms the body of the fiscal receipt and is transmitted to MasterKit Kasa and, through it, to the State Tax Service of Ukraine.

3.3. Product data. Product and variant attributes needed for receipt requisites: name, its Ukrainian translation, SKU, barcode, the UKTZED commodity code, and the excise goods type. These are attributes of goods, not of individuals.

3.4. Data you enter for tax filings. The full name, tax number (РНОКПП) or passport data, position, and telephone number of the person who signs the filings or acts as the cashier; the address of the business unit; the details of the cash registers. This data is required by the State Tax Service in the corresponding forms and is transmitted only for that purpose.

3.5. Customer (buyer) data. We receive from Shopify and store the name of the customer the order belongs to, so that You can find the receipts of a particular buyer by searching on that field in the Service. The buyer’s e-⁠mail address or telephone number is received only if You have enabled delivery of receipts to the buyer, and is then used solely to deliver that buyer’s receipt. All of this data is protected customer data: we receive it only within the access that Shopify has approved for the Service, and we erase it upon a customers/redact request from Shopify.

3.6. Signing credentials. The cloud signature token and key password that You enter are transmitted to MasterKit Kasa, which performs the signing; the Service does not store them and does not write them to its logs. Access keys to MasterKit Kasa and the one-time-password secret of your store are stored encrypted (AES-256-GCM).

3.7. Technical records. Store domain, event type, timestamps, error codes, and technical details of requests to MasterKit Kasa and Shopify, kept for troubleshooting and for proving that a receipt was issued.

3.8. We only collect information that is necessary for the purposes of running the Service for you, and we do not collect information in ways prohibited by applicable law.

4. The purpose of the collection and use of data

4.1. The data listed in section 3 is used to issue and store fiscal receipts, to file the tax forms You have requested, to show You the status of receipts, registers and filings and to let You search them, including by the name of the customer, to notify You by e-⁠mail about the results of filings, to calculate the usage-based charges billed through Shopify, and to provide support.

4.2. We will not use your personal data, or the data of your customers, for advertising, profiling, or any purpose unrelated to the Service. We do not sell personal data.

5. Data transfer

5.1. We do not provide personal data and informational data to third parties without the consent of its owner, except for the following cases:

• transfer to the recipients and processors listed in clause 5.2, to the extent needed to run the Service;
• if it is required to comply with applicable laws, or to execute queries and requests of judicial, law-enforcement, and other public authorities;
• when we believe you violate this Policy or the terms of other contracts and agreements concluded between You and Master Development.

5.2. The recipients and processors involved in running the Service:

5.3. In case of a merger, acquisition, or sale of assets of Master Development to another company, your personal data and information materials are likely to be among the assets to be transferred. If such happens, we will notify you by e-⁠mail or place a notice on our website 30 days before such changes take place.

6. Storage periods

6.1. Store and account data, settings, registers, and the records of filings are stored while the Service is installed.

6.2. When You uninstall the Service, Shopify sends us a shop/redact request 48 hours later. Upon that request we delete the data of your store: Shopify access tokens, settings, payment methods, bank-transfer marks, receipt records, filings, registers, and the encrypted keys. Anonymised counters of issued receipts remain for the purposes of settlement with Shopify.

6.3. Fiscal documents themselves are kept by MasterKit Kasa and by the State Tax Service of Ukraine for the period required by the tax legislation of Ukraine: under article 44.3 of the Tax Code of Ukraine, not less than 1,095 days counted from the filing deadline of the reporting in which they were used, and longer in the cases that the same article lists separately, including a taxpayer that is being liquidated. Neither You nor We may delete them earlier; this is a statutory obligation.

6.4. Upon a customers/redact request from Shopify we erase the buyer’s name and contact data from the corresponding receipt records. Upon a customers/data_request we provide the receipts related to the orders in question.

7. Access to data

7.1. At any time, you may ask us to provide you with all your personal data that we store. We will do our best to respond to such a request within 30 days.

7.2. If your personal data has changed, or you no longer wish to use the Service, you may modify, update, or remove such data in the Service, by uninstalling the Service, or by sending us a request via e-⁠mail.

7.3. If the data that the Service stores and processes has changed, you will need to make the appropriate changes in the Service: outdated data in fiscal documents may lead to their rejection by the State Tax Service.

8. Data storage and security

8.1. Master Development takes all reasonable precautions to protect your data from loss, corruption, or unauthorized use. Data is transmitted over encrypted connections; credentials and other secrets are encrypted at rest; access to production systems is limited to the employees who need it to operate the Service.

8.2. However, you should be aware that there is no way to transfer data via the Internet or store data in digital format that is 100% secure. Thus, despite our efforts, we cannot guarantee You the absolute protection of the data Master Development receives from you.

9. Final provisions

9.1. In connection with the extension or change of the Service functions, this Privacy Policy may be amended. We will notify You of such changes by sending a message to Your e-⁠mail or by posting a notice in the Service.

9.2. If you do not fully understand the terms of this Policy, you may contact us before starting to use the Service to get all the necessary clarifications.

9.3. The English version of this Privacy Policy shall prevail.

9.4. The applicable law is the law of the Republic of Moldova.

Contact

Master Development S.R.L. (reg. no. 1026023049975) · str. Alba-Iulia 21, of. 1, Chișinău, MD-2051, Republic of Moldova · partner@masterkit.ai