Terms of service

Provider and service

Paperlane is provided by Micha Schepen (Molenring 93, 2741 MZ Waddinxveen, the Netherlands), reachable at vschepen@gmail.com. By using Paperlane, you agree to these terms on behalf of the store you are authorized to manage. Paperlane helps merchants import purchase orders, match catalog products, review quantities, save reviewed drafts and create Shopify drafts.

Review every order

You must check product matches, quantities, prices, currencies and references before approving an order. Import and matching results can require manual correction. Tax, shipping, discounts and final commercial terms must be checked separately in Shopify. Creating a draft does not capture a customer payment or complete a sale.

Paperlane supports Excel .xlsx, CSV and supported text-based PDFs, up to 200 order lines per import and 1,000 catalog variants. Scanned or encrypted PDFs, photos and arbitrary document layouts are not supported. Spreadsheet formulas should be replaced with values before import.

Free allowance and subscriptions

The first five successfully saved reviewed drafts are free per store. No paid subscription starts automatically. The Paperlane paid plan is USD $19 per month for 35 reviewed drafts per Shopify billing cycle, when available for your store. Shopify shows the actual charge, billing period and any taxes before you approve it.

Saving a new reviewed draft counts as one order. Reopening it, downloading it again or sending that saved draft to Shopify does not consume another order. Deletion does not restore used allowance. Unused paid allowance does not roll over and Paperlane does not charge automatic overages. When an allowance is used, you can still read saved drafts; new saves require an available allowance.

You can manage or cancel your subscription through Shopify. Access follows the subscription and billing-cycle status confirmed by Shopify. Cancellation does not by itself delete your saved records. Contact us about a billing error or refund request; any approved billing adjustment is handled through Shopify. Nothing in these terms removes mandatory statutory rights.

Your data and account

You retain your rights in the data you import. You give Paperlane permission to process it as necessary to provide your requested service. Only import data you are entitled to use, keep access to your store secure and provide any notices required for your customers. Do not use the app to access another store’s data, disrupt the service or submit unlawful content.

Read our privacy policy for the information processed and how to request an export or deletion. Keep copies of records you need. Uninstalling disconnects Paperlane; records already created in Shopify remain subject to your Shopify store settings.

Availability and changes

Paperlane depends on Shopify and hosting services. Interruptions or changes to those services can affect imports, sign-in or subscription checks. If Shopify cannot confirm a new draft’s allowance, saving may be temporarily unavailable while saved records remain accessible.

We may update Paperlane and these terms as the service develops. Material changes will be communicated to affected merchants. Any new paid charge requires the approval required by Shopify. We may restrict access where necessary to address misuse or a security issue.

Support

For help with an import, connection, subscription or these terms, email vschepen@gmail.com. Include your store domain and a description of the problem. Do not include credentials or unnecessary customer data.

Data processing agreement

This agreement is part of the Paperlane service terms. It applies when Paperlane processes personal data for your store. Your store is the controller and Micha Schepen is the processor. It takes effect when you use Paperlane on behalf of your store and lasts for as long as Paperlane holds that store’s personal data.

Your instructions and the processing

You instruct Paperlane to receive and store the catalog and reviewed order details you submit, match products, create Shopify drafts when you request them, provide exports and support, and handle verified privacy requests. The processing consists of collection, storage, retrieval, organization, transmission, correction and deletion for these purposes. Your use of the app and verified written support requests are your documented instructions. We will notify you if an instruction appears to violate applicable data protection law and suspend the affected processing while the issue is resolved.

Data subjects may include your customers, purchasing contacts, employees and other people mentioned in imported order details. Data may include company or customer labels, order references, filenames, extracted order text, product selections and quantities, store identifiers and privacy-request details. Do not import sensitive personal data or information unnecessary for this workflow. You are responsible for having authority, a lawful basis and appropriate notices for your instructions.

Use, confidentiality and security

We will process this data only to provide your requested service and on your documented instructions, unless applicable law requires otherwise. Where permitted, we will inform you of that legal requirement before processing. We will not sell or share the data for advertising, use it to build advertising profiles, or combine it with unrelated customer datasets. Anyone we authorize to access the data must be bound by confidentiality duties.

We will maintain technical and organizational measures appropriate to the processing risk. Paperlane currently uses HTTPS, authenticated access separated by store, encrypted access credentials, hashed session tokens, verification of Shopify signatures, checks on incoming requests, and database encryption at rest provided by its host. We will review these measures and address identified vulnerabilities. You must secure your Shopify accounts and devices.

Service providers and transfers

You authorize the hosting and delivery providers listed in our privacy policy to support the service: OpenAI Sites with Cloudflare infrastructure. Gmail handles support correspondence; do not send unnecessary customer records by email. Shopify receives the draft data that you explicitly send to your own store. We remain responsible for the performance of any subprocessors we engage and must impose data protection obligations appropriate to their processing.

We will notify affected merchants before adding or replacing a subprocessor and allow a reasonable opportunity to object on data protection grounds. If an objection cannot be resolved, you may stop the affected processing and request return or deletion of your data. Where a transfer outside the EEA or another protected jurisdiction requires a legal safeguard, we must ensure an applicable safeguard is in place before that transfer. This agreement does not itself claim that any particular hosting location or transfer mechanism has been certified.

Assistance, incidents and accountability

Taking account of the processing and information available to us, we will assist you with requests to access, correct, export, restrict or delete personal data, and with applicable security, breach-notification, impact-assessment and supervisory-authority consultation obligations. If we become aware of a personal data breach affecting your data, we will notify you without undue delay and provide available information about the incident, its likely effects and the response, with further updates as information becomes available.

We will provide information reasonably needed to demonstrate compliance with this agreement and allow and contribute to legally required audits, including inspections, by you or an auditor you appoint. Audit arrangements must protect other stores’ information and the security of the service. Contact vschepen@gmail.com for instructions, assistance or supporting information.

Return and deletion

At the end of the service, you may choose return or deletion of your store’s personal data. You can export saved drafts through the app and request further assistance by email. We will delete the data and copies under our control after return or on your deletion instruction, except where applicable law requires retention. Verified Shopify store-deletion notifications trigger deletion of the associated workspace as described in the privacy policy. Records already sent to Shopify remain under your control there. Any legally retained data must remain protected and used only for that retention purpose.

For personal data processed for your store, this agreement takes precedence over conflicting general service terms. It does not reduce obligations or rights under applicable data protection law.