Terms of service
Effective 14 November 2026.
These terms are the agreement between you, the merchant whose store accepts them in TrueLanded, and the operator named in clause 1. You accept them when you tick the box and select Accept in the app. Until you do, the app's features stay locked. If you accept for a business, you confirm you can bind that business. Part 2 is our data processing agreement with you and forms part of these terms.
Part 1: Using TrueLanded
1. The service and who provides it
TrueLanded is a Shopify app for merchants based in Australia who import stock. It reads supplier, freight and broker invoices with AI, works out landed cost, updates cost per item in Shopify when you apply a shipment, estimates margin from your orders, and can post Manual Journals to Xero.
TrueLanded is provided by Fabio Henrique Filardi, a sole trader trading as Omega AX Cloud Consulting (ABN 33 857 714 665), based in Queensland, Australia ("we" or "us").
2. Plans and billing
The plans, prices, trial, allowances and when allowances reset are shown on Shopify's plan page and in the app's Settings page. Shopify bills paid plans with your Shopify invoice, in US dollars, and handles upgrades, downgrades and cancellations. Taxes may apply. If you need a tax invoice, email us.
Paid plans include a free trial where the plan page says so. A plan's allowances reset each calendar month and unused allowance doesn't carry over. "Unlimited" on a plan means normal use by one store. If your use is far above what similar stores use and it affects the service or our costs, we'll contact you to agree a fix. We'll give you at least 14 days' notice before limiting your use, unless we must act sooner to protect the service.
We may change prices, plans or allowances by giving you at least 30 days' notice by email. A change applies from your next billing period after the notice ends, and only with any approval Shopify requires. If you don't agree, you can uninstall before it takes effect and you won't pay the new price.
If you uninstall part-way through a billing period, we don't normally refund the unused part, except where the law requires it. Clauses 3 and 7 say when we refund fees.
3. Acceptable use
You must:
- only upload documents and connect accounts you are allowed to use
- not upload anything unlawful, or any document showing card numbers, tax file numbers, identity documents, health information or other sensitive information
- not try to reach another store's data, get around plan limits, or interfere with the service
- not copy or resell the service, or use our confidential information without permission. You're otherwise free to build or use competing products
- keep access to your Shopify and Xero accounts secure
We may suspend access if you materially breach these rules, or if we reasonably need to in order to protect the service, other merchants or their data. We'll suspend only what's needed, for as long as it's needed, and we'll tell you why unless we legally can't. If the suspension wasn't caused by you, we'll refund the fees for the time you had no access.
4. Check the figures
TrueLanded helps with calculations. It doesn't give accounting, tax, customs or legal advice, and it doesn't replace your accountant or customs broker.
AI can misread an invoice, whichever model reads it, and a wrong value can look right. Exchange rates, allocations, duty and GST treatment depend on what you enter and choose. Margin reports are estimates from the data Shopify makes available and the costs you enter, and can be incomplete. Before relying on any figure you must check:
- every value read from an invoice, against the invoice itself, before you create a shipment. Creating the shipment confirms you've checked them
- landed costs and cost changes, before you apply them to Shopify
- Xero journals, before you confirm them and again in Xero
- margin figures, before you make decisions from them
You are responsible for your books, tax returns, customs declarations and record keeping. TrueLanded isn't a record-keeping system: keep your own copies of invoices and records. This clause doesn't remove the care we must take in providing TrueLanded, or your rights in clause 6.
5. Your data, Shopify and other services
Your data stays yours. You let us use it only to provide TrueLanded to you, as Part 2 describes. We own the app and everything in it other than your data.
We alone provide and support TrueLanded. We are solely responsible for it, including how we develop, market, distribute and support it, and how we access, use, share and store your data. Clause 6 applies to that responsibility. Shopify isn't liable for faults in TrueLanded or for harm from installing or using it. Shopify can't help you install or use TrueLanded unless it says so, so contact us for support. Shopify can suspend or end our access to its API at any time, and that could stop TrueLanded working for you.
TrueLanded also depends on Xero and the providers in Part 2. They have their own terms, and we don't control them. We aim to keep TrueLanded running, but we don't promise it will be uninterrupted or error free.
6. Liability
Nothing in these terms excludes or limits any right or remedy you have under the Australian Consumer Law that can't lawfully be excluded or limited, or any other liability that can't lawfully be limited. These rights include the consumer guarantees, such as that we'll provide the service with due care and skill.
Where the law lets us limit our liability for failing to meet a consumer guarantee, our liability is limited to supplying the service again or paying the cost of having it supplied again.
Otherwise, to the extent the law allows:
- apart from those rights and what these terms say, we make no other promises about the service
- neither of us is liable to the other for indirect or consequential loss, or for lost profit or revenue
- neither of us is liable to the other for lost data, except the reasonable cost of restoring data lost because we broke Part 2
- each of us limits our total liability to the other for all claims about the service to the greater of A$500 and the fees you paid for TrueLanded in the 12 months before the event that caused the claim, converted to Australian dollars at the rate on the day each fee was charged. This limit doesn't apply to fraud or a deliberate breach of clause 3
- each of us is liable only to the extent the other didn't cause or contribute to the loss. This includes loss you could have avoided by checking figures as clause 4 requires
7. Termination and uninstall
You can stop at any time by uninstalling TrueLanded from Shopify admin. Uninstalling doesn't undo changes already made: cost per item stays as it is in Shopify, and journals stay in Xero.
We may end these terms by giving you 30 days' notice by email. We may end them sooner if you seriously breach them and, where the breach can be fixed, you don't fix it within 14 days of our notice, or if the law requires it. If we end these terms and you haven't breached them, we'll refund any fees you've paid for the time after they end.
Part 2 says what happens to your data. Clauses that are meant to continue, including 4, 6 and 8, continue after these terms end. Part 2 continues for as long as we or our providers hold your data.
8. Governing law
These terms are governed by the law of Queensland, Australia. You and we submit to the non-exclusive jurisdiction of the courts of Queensland, the federal courts sitting in Queensland, and the courts that hear appeals from them.
9. Changes to these terms
We may change these terms when the service, the law or our providers change, and only as far as is reasonable for that reason. We'll post the new version here with a new effective date. If a change is more than minor or could disadvantage you, we'll give you at least 30 days' notice by email and ask you to accept the new version in the app. If the law or a security risk requires a change sooner, we'll give as much notice as we can. If you don't agree, you can uninstall before the change takes effect, at no cost.
10. Transfer
We may transfer these terms to a company we control, or to a buyer of the TrueLanded business, if the new operator agrees to be bound by them and your rights aren't reduced. We'll give you 30 days' notice, and you can uninstall before the transfer. You need our agreement to transfer these terms.
11. Contact and notices
Email support@truelanded.com. TrueLanded is run by one person, so we answer support on Australian business days and don't promise round-the-clock support. Support email is for questions about the app. Please don't send invoices, bank details, passwords or customer details by email. Upload invoices in the app instead.
We send notices about the service by email to your store's contact email: the store owner's email address, which we read from Shopify when you accept these terms. If notices should go to a different address, email us.
Part 2: Data processing
D1. Roles
For personal information in the data your store gives us, you decide why and how it's used, and we handle it for you as your service provider. Laws such as the GDPR call these roles controller and processor. We act only on your instructions, which are these terms and how you use the app, unless the law requires otherwise. Our providers keep limited data for their own security and service operations, as D5 describes.
You are responsible for having the right to give us that data. Where the law requires, you must also tell the people it's about what your store does with it. That includes your staff and the people named on invoices you upload.
We decide how to handle a small amount of information for our own business, such as your store's contact email, the record of your acceptance of these terms, and emails you send to support. Our privacy policy covers that. If these terms and the privacy policy conflict about processing for you, these terms apply.
D2. What we process and why
| Data | Why | Stored? |
|---|---|---|
| Store domain and Shopify access tokens | To connect to your store | Yes |
| Store contact email, and when and by which Shopify user these terms were accepted | To send you notices, and to show you accepted these terms | Yes |
| Products: titles, SKUs, weights, on-hand quantities, cost per item | To match invoices and work out and update costs | Details used in shipments are stored; the rest is read when needed |
| Invoice files you upload | To read the invoice values | Only until it's read, and never more than 24 hours (see D5) |
| Values read from invoices: supplier name, invoice number and date, currency, line items, charges and totals. Also shipments, cost changes and supplier matches | To work out landed cost, revert changes and estimate margin | Yes |
| Orders: line items, quantities, amounts after discounts, whether refunded or cancelled, dates, order IDs | To calculate the margin report when you open it | No. Discarded after each report |
| Xero: tokens, organisation name, chart of accounts, tracking categories, journals | To post journals you confirm | Yes. Tokens are also encrypted by the app |
| Plan and usage counts | To apply plan limits | Yes |
Customers. Shopify treats order data as customer data. We read it to build the margin report, and we don't store it. We don't request customer names, email addresses, phone numbers, addresses or customer IDs from Shopify. Shopify's privacy requests can include a customer's identifiers; we use them only to check for records and respond, and we don't keep them.
Personal information in invoices. Invoices can include people's names and contact details, such as a supplier's or broker's contact person, and sometimes bank details. We send each file whole to our AI provider and don't remove those parts first. We don't store those details as values read from the invoice, and the file itself is deleted once it's read.
We don't sell your data, use it for advertising, or use it to train AI models. Under its product terms, Microsoft doesn't use it to train its models either.
D3. Subprocessors
We use these providers to run TrueLanded. You authorise us to use them.
| Provider | What it does | Data it handles | Where |
|---|---|---|---|
| Vercel | Runs the app | All data passing through the app; request and error logs, which can include store domains, record IDs and file names | App runs in Sydney. Vercel may process data, including traffic and logs, in the US and other countries where it or its subprocessors operate |
| Supabase | Database and invoice file storage | Everything marked as stored in D2 | Stored and mainly processed in Sydney. Supabase's staff and subprocessors may access it from other countries |
| Microsoft Azure | AI that reads uploaded invoices (Azure OpenAI in Microsoft Foundry) | The whole invoice file, and the values read from it | Processed in Microsoft's Asia Pacific region, which can include countries outside Australia; our Azure resource is in Australia East. Content flagged by Microsoft's abuse monitoring is stored in Australia |
We're responsible for what our subprocessors do with your data as if we had done it, and clause 6 applies.
Shopify and Xero aren't our subprocessors. You hold your own accounts with them, and we use their APIs on your behalf: Xero only if you connect it. By connecting Xero, you consent to us storing your Xero data and passing it to the providers above as needed to run TrueLanded. We don't send Xero data to our AI provider. Xero receives the journals you confirm, including account codes, amounts, supplier name, invoice reference and a link to the shipment, and handles that copy under its own terms.
Before adding or replacing a subprocessor, we'll update this list and email you at least 14 days before the change. If you object and we can't resolve it, you can uninstall at no cost before the change takes effect. In urgent cases, such as a provider failing, we'll tell you as soon as we can.
D4. Security
- Data travels over encrypted connections (HTTPS/TLS).
- The database and file storage are encrypted at rest by Supabase. Xero tokens are also encrypted by the app with AES-256-GCM.
- Invoice files are kept in a private storage bucket.
- Each store's records are kept separate, and the app only shows a store its own data.
- At our end, only the operator has access to production systems, and that access is protected by strong passwords and two-factor authentication. Our providers' staff may have limited access under their own security controls.
No system is perfectly secure, so we can't promise that nothing will ever go wrong.
D5. Retention and deletion
- Orders: not stored.
- Invoice files: deleted automatically once read, and never kept more than 24 hours after upload. A file that can't be read is deleted too, so upload it again to retry. The values read from a file remain after it's deleted.
- Everything else: kept while the app is installed, because it's needed for reverts, the margin report and journals.
- When you uninstall: we delete your Shopify sessions and start disconnecting Xero. Disconnection runs as a background job and usually finishes within minutes.
- 48 hours after you uninstall: Shopify tells us to erase your store's data, and on receipt we delete all of it: shipments, invoices and files, Xero data, your contact email and acceptance record, settings and usage counts. If you reinstall before then, Shopify doesn't send this request and your data stays.
- Sooner: you can ask us to delete your data at any time by emailing support. We'll do it within 30 days, whether or not the app is still installed.
Copies held by providers. Deleting data from the app doesn't immediately remove every copy:
- Database backups, where our plan includes them, are overwritten on a rolling cycle, currently within 7 days.
- Logs expire on the providers' own schedules. Our background job records hold only IDs and status, and are deleted within 30 days.
- Microsoft doesn't store invoices to read them. If its abuse monitoring flags content, it can keep that content for a limited time, in Australia, for review by authorised Microsoft staff. It can also keep data where the law requires. We can't delete data held there on request.
We keep our own records, such as support emails, as our privacy policy describes. We may keep anything else longer only if the law requires it.
D6. Breach notification
If we become aware of actual or suspected unauthorised access to, or loss or disclosure of, your data, we'll tell you without undue delay by email to your store's contact email, within 72 hours where we reasonably can. We'll tell you what happened and what data is affected as far as we know, and what we're doing about it, and we'll update you as we learn more. We'll give you what we reasonably can for any notice you must give, and we'll tell Shopify and Xero within the time their terms require. If needed to protect your data, we may pause invoice reading and Xero posting until the issue is resolved.
D7. Helping with requests about personal information
- Your store's customers: Shopify passes their requests to us. We verify them, check for records and respond. Because we don't store customer data, we normally hold none and say so.
- People named in invoices or other records: email support and we'll help you find, correct or delete that information within 30 days.
- A copy of your data: if you ask, we'll give you a structured, machine-readable copy of the personal information we hold about you or your store, and let you correct it.
If someone contacts us directly about your data, we may involve you, and we'll respond as the law requires. We'll also give you reasonable information to show that we meet this Part.
D8. International transfers
Your database and files are stored in Sydney. Some data can leave Australia, as D3 shows: invoices are read in Microsoft's Asia Pacific region, which can include countries outside Australia, Vercel may process traffic and logs overseas, and our providers' staff may access data from other countries. You authorise this for your business. That doesn't replace anything you must do for the people named in your data under privacy law. The law in those countries may not protect this information as Australian law does.
TrueLanded is only for stores based in Australia. We don't offer standard contractual clauses. If the GDPR or UK GDPR applies to your use, don't connect your store or upload invoices unless we've first agreed in writing how that data will be handled.
D9. When processing ends
When these terms end, we delete your data as D5 describes. If we end these terms and TrueLanded is still installed, we'll delete your data within 30 days after they end. We don't automatically return data on uninstall, so keep your own copies of anything you need first, or ask us for a copy under D7.