ArtUp LabsPrivacy Policy
Last updated: October 12, 2026.
ArtUp Ledger is a Shopify app that records a store's Shopify orders, refunds, taxes and payouts in the merchant's QuickBooks Online company. It is made by ArtUp Labs, the trade name of Individual Entrepreneur Karpets A.V. (Artyom Karpets), Republic of Kazakhstan. This policy covers the ArtUp Ledger app only. Questions: support@artuplabs.com.
What the app reads from Shopify
- Orders and refunds: order number, dates, currency, product titles, SKUs, quantities, prices, discounts, shipping charges, tax lines, tips, totals, payment transactions (gateway and amount), refunds, the test and cancelled flags, tags and sales channel. For wholesale (B2B) orders: the company name, payment terms and PO number.
- Shopify Payments payouts: payout amounts and dates, and the balance transactions in each payout (sales, refunds, fees, adjustments, reserves).
- Store details: the store's currency and time zone, and the store's contact email, only as the default address of the daily problem email.
Shopify treats order data as protected customer data. ArtUp Ledger uses it at level 1 only: the app never asks Shopify for a customer's name, email address, phone number or address, and it stores no personal data of your Shopify customers. The QuickBooks documents it writes use a generic customer ("Shopify Customer"), or the company name of a wholesale order. Of the customers in your QuickBooks company, the app keeps only the ones it posts to itself — the generic "Shopify Customer" (one per currency) and the companies of wholesale orders; it does not copy your other QuickBooks customers.
What the app reads from and writes to QuickBooks Online
With the access you grant when you connect QuickBooks, the app reads your company's name, country and settings (home currency, multicurrency, sales tax) and the lists it posts to: accounts, items, tax codes, classes, payment methods and currencies. It looks up by name only the customers it posts to. It writes sales receipts, invoices, payments, refund receipts, credit memos, journal entries and deposits, and during setup the accounts, items and generic customers it needs. What it posts is described in the posting guide.
What the app stores, and for how long
| Data | Kept |
|---|---|
| Settings: your choices, the store's time zone, the daily email address and whether it is on | While the app is installed |
| QuickBooks connection: the company id and the OAuth tokens, encrypted with a key in AWS KMS (AWS Key Management Service) before they are stored | Until you disconnect QuickBooks in the app's settings or uninstall the app; then the tokens are revoked at Intuit and deleted |
| A copy of your QuickBooks lists (accounts, items, tax codes, classes, payment methods, currencies), so the app does not ask QuickBooks for them on every order, and the QuickBooks name and id of the customers the app posts to: the generic "Shopify Customer" and the companies of wholesale orders | Refreshed daily, kept while the app is installed |
| One record per posted document: the Shopify order number and ids, the QuickBooks document number and id, amounts, status, warnings or errors, and the document as sent to QuickBooks | While the app is installed |
| Sync status of each order, refund, day and payout, and the progress of syncs of older orders | While the app is installed |
| The outcome of each order in a sync of older orders | 90 days |
| Previews (dry runs that show what would be posted) | 30 days |
| Monthly order counts for your plan | 70 days from the start of the month |
| Your app plan as last read from Shopify (the plan, the store's Shopify id and when it was checked), so the plan is not asked for on every order | While the app is installed; refreshed at most hourly |
| For a customers/redact or customers/data_request request: the Shopify customer id it names (a number — no name or contact details), in the request's background job and the log line that records the request | 14 days |
| A QuickBooks connection waiting for you to confirm it in the app | 10 minutes |
| The Shopify access token of your store | Until you uninstall the app |
| Server logs (store domain, order and document ids, error messages) and failed background jobs (store domain and ids) | 14 days |
Items with an expiry are removed by the database's automatic expiry, usually within a few days after the date. The database keeps point-in-time recovery backups for 35 days, so deleted data stays in those backups for up to 35 days and is then gone.
Where it is stored and how it is protected
- The app runs on Amazon Web Services in the United States (us-east-1, Northern Virginia): AWS Lambda, Amazon DynamoDB, Amazon SQS, AWS KMS and Amazon CloudWatch Logs.
- All data is encrypted at rest by AWS and sent over HTTPS.
- QuickBooks tokens are additionally encrypted with a dedicated AWS KMS key before they are stored.
Deletion
- When you uninstall the app (Shopify's app/uninstalled webhook): the store's Shopify access token is deleted at once, and the QuickBooks tokens are revoked at Intuit and deleted, which disconnects the app from your QuickBooks company. The rest of the data stays for 48 hours in case you reinstall.
- 48 hours after uninstall Shopify sends the shop/redact request, and the app deletes every record of the store: settings, the QuickBooks connection, the copy of your QuickBooks lists, document records, sync statuses, previews, plan counters and the access token.
- customers/redact and customers/data_request: these requests concern a Shopify customer. The app stores no personal data of your Shopify customers, so there is nothing to delete or to report; the app records that the request arrived. The QuickBooks customers the app keeps (the generic "Shopify Customer" and wholesale companies) are deleted with the rest of the store's data at shop/redact.
- Documents the app posted to QuickBooks stay in your QuickBooks company: they are your books, and uninstalling does not remove them.
Sharing
We do not sell, rent or share store data, and do not use it for advertising or for machine learning. The app uses no analytics or tracking. Data goes only to the services that run the app:
- Amazon Web Services: hosting, storage and logs, as listed above.
- Resend: delivers the daily email (the address it goes to and what it says).
- Intuit: QuickBooks Online, where the app writes your books.
- Shopify: the source of the orders and payouts, and billing for the app's plans.
Emails
If documents need your attention, the app sends at most one email a day to the store's contact email or to the address you set. You can change the address or turn the email off in the app's settings.
Changes and contact
If this policy changes, the date at the top changes with it. Questions and requests: support@artuplabs.com. Security reports: security@artuplabs.com.