Skip to content
SchemeLedger

Privacy Policy

Last updated: September 3, 2026

SchemeLedger: VAT Margin (“SchemeLedger,” “the Service”) is operated by Automatify Handelsbolag, organisation number 969782-2584, of Körsbärsvägen 9, 616 90 Åby, Sweden (“Automatify Handelsbolag,” “we,” “us”). This Privacy Policy explains what information SchemeLedger processes, why, and how to contact us about it.

Scope

This Privacy Policy applies to:

  • the SchemeLedger marketing website at schemeledger.app;
  • the SchemeLedger Shopify application and related service functionality, once installed by a merchant; and
  • support and privacy-related communications between you and us.

SchemeLedger is designed for Shopify merchants who use, or are evaluating, a VAT Margin Scheme workflow. SchemeLedger is currently in pre-launch preparation and is not yet listed on the Shopify App Store; this policy describes how information is intended to be handled once the Service is in use, and already governs any pre-launch communications you have with us.

Information we process

SchemeLedger is built around Shopify order and product data confirmed or configured by the merchant, rather than around ordinary customer-profile information. The sections below describe what SchemeLedger is designed to process.

Information available through Shopify

Once a merchant installs the SchemeLedger app, SchemeLedger may process information obtained through Shopify APIs that is necessary to provide the Service, including:

  • Shopify shop/store identifiers;
  • product and variant identifiers;
  • order and line-item identifiers;
  • relevant order financial data, such as pricing and line-item totals; and
  • product/variant configuration relevant to the VAT Margin Scheme workflow.

SchemeLedger is designed not to request or persist ordinary customer-profile fields such as customer name, email address, phone number, or billing, shipping or postal address as part of its ledger workflow. The workflow is built around store, product, variant, order and line-item identifiers and the financial data described above — not around end-customer profile information — and SchemeLedger’s data model does not include fields for retaining it.

Information merchants provide directly

Merchants operating SchemeLedger may provide or confirm additional information needed for the VAT Margin Scheme workflow, including:

  • acquisition/purchase-price information for relevant items;
  • confirmation status of workflow inputs;
  • provenance or supporting-evidence references, where the Service supports this;
  • VAT rate and workflow configuration;
  • product treatment/classification decisions made by the merchant; and
  • other information reasonably required to operate the SchemeLedger workflow.

SchemeLedger uses this information, together with relevant Shopify order data, to determine application readiness states, perform VAT margin calculations, and create ledger records — see “How we use this information” below.

Website and email communications

The SchemeLedger website does not use analytics, advertising pixels, session recording, or any other visitor-tracking technology, and does not collect email addresses through a sign-up form. If you contact us — for example by emailing our privacy contact — we process the information you voluntarily provide in that communication, such as your email address and message content, in order to respond to you.

How we use this information

Where applicable, SchemeLedger uses the information described above to:

  • operate and provide the SchemeLedger service;
  • connect merchant-confirmed acquisition information with relevant Shopify order financial data;
  • determine application readiness states (READY / REVIEW_REQUIRED / EXCLUDED) based on the inputs available and configured;
  • perform VAT Margin Scheme calculations based on merchant-confirmed inputs;
  • create and preserve ledger records and calculation snapshots;
  • support reporting and export functionality;
  • maintain the security, integrity and reliability of the Service;
  • respond to support and privacy-related communications; and
  • meet applicable legal and regulatory obligations.

SchemeLedger supports merchants in structuring VAT Margin Scheme records based on information the merchant confirms. SchemeLedger does not determine whether a particular product, purchase or sale legally qualifies for VAT Margin Scheme treatment — that determination remains the merchant’s responsibility.

Legal bases for processing

Where the EU/UK General Data Protection Regulation (“GDPR”) applies, we rely on different legal bases depending on the processing activity, which may include:

  • performance of a contract, where processing is necessary to provide the Service to a merchant;
  • legitimate interests, such as securing and operating the Service, preventing misuse, and administering our business relationships;
  • compliance with a legal obligation, such as recordkeeping requirements; and
  • consent, where we specifically request it (for example, for optional communications), if applicable.

For information processed through the Shopify app on a merchant’s store, the merchant may act as the controller of their own end-customers’ data, with SchemeLedger acting as a processor or service provider on the merchant’s behalf for that processing. For our direct relationship with merchants — including website, support and privacy communications, and our own business records — Automatify Handelsbolag acts as the controller. We do not draw further conclusions here about the legal basis applicable to a merchant’s own end-customer data, as that depends on the merchant’s own processing activities and relationship with their customers.

Shopify

SchemeLedger relies on Shopify APIs and Shopify’s platform infrastructure to operate as an embedded Shopify application. Shopify separately processes information under its own terms of service and privacy policy, independent of this Privacy Policy. Use of Shopify’s platform does not imply that Shopify endorses, certifies or is responsible for SchemeLedger.

Shopify privacy and data-protection requests

The SchemeLedger Shopify application supports Shopify’s mandatory privacy and compliance processes relating to customer data requests and store data redaction, as required of all Shopify apps. If you are a Shopify merchant’s customer and have a question about how your data was handled through a store using SchemeLedger, please contact that store directly in the first instance; SchemeLedger supports the relevant Shopify-mandated request and deletion processes on the merchant’s behalf.

Data retention

We retain information for as long as reasonably necessary to provide the Service, maintain required business and ledger records, meet legal and regulatory obligations, resolve disputes, and enforce our agreements. Some records — including ledger and calculation records — may need to be retained after a merchant stops using the Service where this is legally or operationally required, for example to preserve historical financial records. Deletion or redaction requests are handled subject to these retention requirements; we do not promise immediate deletion of all records in every case.

Sharing information with service providers

We do not sell personal information. We may share information with:

  • hosting, infrastructure and database providers used to operate the Service and website;
  • Shopify, as the platform SchemeLedger is built on;
  • providers reasonably required to operate, secure or support the Service; and
  • professional advisers or authorities, where necessary to comply with a legal obligation or protect our rights.

We have not published a detailed subprocessor list at this time; this Privacy Policy will be updated as the Service’s infrastructure is finalized ahead of public launch.

International transfers

Some service providers we use may process information outside the European Economic Area (EEA). Where this occurs, appropriate safeguards required by applicable data protection law are used.

Security

SchemeLedger uses reasonable technical and organizational measures designed to protect information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Your rights

Depending on applicable law, you may have rights in relation to information we hold about you, including rights to:

  • access the information we hold about you;
  • request rectification of inaccurate information;
  • request erasure of information, subject to our retention obligations described above;
  • request restriction of processing;
  • object to certain processing;
  • request portability of information you have provided to us, where applicable; and
  • withdraw consent, where processing is based on consent.

You also have the right to lodge a complaint with a supervisory authority. In Sweden, the relevant supervisory authority is Integritetsskyddsmyndigheten (IMY). To exercise any of these rights in relation to our own processing, contact us using the details below.

Changes to this policy

We may update this Privacy Policy from time to time, including as SchemeLedger moves toward public launch and its infrastructure and workflow are finalized. The “Last updated” date above reflects the most recent revision.

Contact

Automatify Handelsbolag
Organisation number: 969782-2584
Körsbärsvägen 9, 616 90 Åby, Sweden

For privacy and data-protection questions or requests, contact: privacy@schemeledger.app.