Terms & data processing

Last updated 26 August 2026

Who these terms are with

VATparity is operated by Sin Chi Wan, a sole trader established in the United Kingdom (“we”). These terms apply between us and the merchant whose Shopify store installs the app (“you”). Installing the app means accepting them. Contact: support@vatparity.io.

What the app does — and does not do

VATparity asks Shopify’s own tax engine what it would charge for a set of constructed scenarios, compares each answer against a versioned EU/UK rate table, and reports the result with its evidence. Every scenario is a calculation: nothing is ordered, paid for, fulfilled, or refunded, and no price, theme, or checkout setting of yours is changed.

To construct those scenarios the app creates a small number of clearly-named synthetic records in your store — test customers on example.com addresses and test products. They are listed on the app’s Setup screen, removable there with one click, and removed on a best-effort basis when you uninstall.

The output is a set of software test results. It is not tax advice, not an audit, and not a substitute for your accountant. You remain responsible for your own VAT position and filings.

Plans, billing, cancellation

There is a free tier and one paid plan at $19 per 30 days. All charges run through Shopify’s Billing API and appear on your Shopify invoice — we never see or hold a card number. Cancel from the app’s Plan screen or by uninstalling; Shopify handles any proration. We do not offer lifetime deals.

Data processing terms

These terms govern personal data reached through the app, and are intended to satisfy Article 28 UK GDPR.

Roles

For personal data inside your store that the app reaches on your instruction, you are the controller and we are your processor. For the account data we hold to run the service — your shop domain, your setup answers, your scan records — we are the controller, as our privacy notice states.

Subject matter, duration, nature and purpose

We process only to provide the VAT health check described above, for as long as the app is installed, plus the short window Shopify’s redaction notifications allow. We do not process for any other purpose, and we act only on your documented instructions — installing the app, running a scan, subscribing to monitoring — unless UK law requires otherwise.

Types of personal data, and categories of data subject

In practice this is a short list, because the app is built not to need one. No personal data about your real customers is read or stored. The only customer records the app touches are the synthetic ones it creates itself. What we do hold: your shop domain and access token, your setup answers, facts read from your store’s configuration, scan evidence, and — only if you type one — an email address for change alerts. The data subjects are therefore you and your staff, not your customers.

Subprocessors

Fly.io, which hosts the application and its database in London, United Kingdom; and Resend, which receives an alert email address and the alert text, and only if you have configured email alerts. That is the complete list. We will tell you before adding another, giving you the chance to object.

Security

The database is stored on an encrypted volume; all traffic is HTTPS-only; secrets are held in the host’s secret store and never in source control; access to production requires the operator’s authenticated account with two-step authentication; and there is no endpoint anywhere in the app that returns data for more than one shop. Our full operating policy, including the incident-response procedure, is available on request.

Your rights, and ours to assist

Shopify’s mandatory compliance webhooks (customers/data_request, customers/redact, shop/redact) are implemented, so requests relayed through Shopify are honoured automatically. Direct requests, and any request for the information you need to demonstrate our compliance, reach us at support@vatparity.io. We will notify you without undue delay, and within 72 hours of becoming aware, of any personal data breach affecting your data.

Deletion

Uninstalling deletes everything we hold about your shop, in one transaction, when the uninstall notification arrives; shop/redact re-runs the same purge about 48 hours later as a guarantee. Exports you downloaded are yours and outside our reach.

International transfers

The application and its database run in London. Where a subprocessor operates outside the UK, we rely on the transfer mechanisms in that subprocessor’s own terms.

Availability and support

VATparity is run by one person, and support is asynchronous: write to support@vatparity.io and you will get a reply. We do not promise an uptime figure we cannot staff, and we would rather say that plainly than publish a number.

No warranty, and the limit of our liability

The app is provided as-is. We do not warrant that a scan will find every VAT problem in your store — the app reports what it tested and says so, and its documented scope limits are part of the product. To the extent the law allows, our total liability to you is limited to the fees you paid us in the twelve months before the claim. Nothing here limits liability that cannot lawfully be limited.

Changes and governing law

We will post any change to these terms on this page with a new date, and tell you in-app if the change is material. These terms are governed by the laws of England and Wales.

These are software test results, not tax advice.