How Rev3 Relay collects, uses, and protects data when connecting your Shopify store to QuickBooks Online.
Rev3 Relay ("Rev3 Relay," "we," "us") provides a service that synchronizes order data from a merchant's Shopify store into their QuickBooks Online company, and alerts the merchant when a sync fails. This policy explains what data passes through Rev3 Relay to make that possible, and nothing more — Rev3 Relay does not run an accounting service, a marketplace, or a consumer app; it connects two systems the merchant already uses.
This policy applies to the merchant account holder ("you") who connects a Shopify store and a QuickBooks Online company to Rev3 Relay.
Rev3 Relay requests only the access it needs to move order data from Shopify into QuickBooks Online and to detect when that movement fails:
| Source | Data | Why |
|---|---|---|
| Shopify | Order records: line items, prices, taxes, shipping, discounts, customer name and email, order and refund events | Translated into QuickBooks invoices and sales receipts |
| QuickBooks Online | Customer records, invoice and sales receipt objects, chart of accounts references needed to post a sale | To create, match, and verify synced transactions |
| Both | OAuth access and refresh tokens | To authenticate API calls on your behalf, on an ongoing basis |
Rev3 Relay does not request access to full payment card numbers, bank account credentials, payroll, or tax filings. We do not read Shopify or QuickBooks data unrelated to order-to-invoice syncing.
Order and customer data is used exclusively to:
OAuth tokens and synced order metadata are encrypted at rest and in transit (TLS 1.2+). Access to production data is limited to the systems that perform the sync; we do not maintain a general-purpose admin UI that exposes raw customer records beyond what's needed to show you a sync's status.
No system is unbreakable, and we do not claim otherwise — if we become aware of a security incident affecting your data, we will notify you without undue delay.
Sync records and logs are retained for as long as your account is active, so that reconciliation and support remain possible. If you disconnect your store or delete your account, we delete synced order metadata and OAuth tokens within 30 days, except where a short retention is required to resolve an open support or legal matter.
You may request a copy of the data Rev3 Relay holds about your account, ask us to correct it, or ask us to delete it, by contacting us using the details below. Where applicable law (such as the GDPR or a US state privacy law) grants additional rights — access, portability, restriction, or objection — we honor those requests for the data Rev3 Relay controls.
Rev3 Relay is a business tool for merchants operating a Shopify store and is not directed at, or knowingly used by, children under 16.
Rev3 Relay may process data in countries other than the one you operate your business in. Where required, we rely on standard contractual safeguards for any such transfer. If you operate in the European Economic Area or United Kingdom, additional GDPR-specific terms apply and are available on request.
If we make a material change to this policy, we will notify connected accounts by email before the change takes effect and update the date at the top of this page.
Questions about this policy or your data can be sent to support@rev-3.com.