1. Scope and our role

This notice applies specifically to the Apollo Invoicing app for Stripe (the “Stripe App”) and supplements the Apollo Privacy Policy. The Stripe App is operated by Studio 404 d.o.o., Gradišče 15c, 1360 Vrhnika, Slovenia (“Apollo”, “we”, “us”). Space Invoices is the Marketplace creator name. Space Invoices Inc. owns the platform intellectual property and licenses it to Studio 404 d.o.o. for operation of the Apollo service in this market.

Apollo is the data controller for account, connection, support, and security information where we determine how that information is used. When a business connects its Stripe account and instructs Apollo to use customer or transaction data to create and manage invoices, that business is generally the controller and Apollo processes the data on its behalf, subject to the parties’ agreement and applicable law.

2. Stripe data we collect and process

Depending on the features you use, the Stripe App processes:

Connection data: Stripe account and user identifiers, Stripe role or access level, Stripe mode (live or test), Apollo account and entity identifiers, connection dates, and app settings.
Authentication data: Stripe OAuth access and refresh tokens and token expiry information. OAuth tokens are encrypted at rest.
Payment data: Payment Intent identifiers, amount, currency, status, associated customer, and available billing details. Apollo does not receive full payment card numbers or card security codes through the Stripe App.
Customer data: names, email addresses, billing or shipping addresses, company details, and tax identifiers available in the connected Stripe account.
Invoice and checkout data: Stripe invoice identifiers and status, line items, product or price descriptions, quantities, discounts, tax information, and related Checkout Session data.
Event and diagnostic data: relevant Stripe webhook event identifiers, event types, object identifiers, event payloads, processing status, and error details used to automate invoices, prevent duplicates, and troubleshoot failures.
Apollo output: Apollo customer and invoice records created from connected Stripe data, including document status, fiscalization status where applicable, and links between Stripe objects and Apollo invoices.

We receive this data from Stripe through the permissions approved during installation, from Stripe webhook events, and from the settings and actions you choose in the Stripe App.

3. How and why we use Stripe data

We process Stripe-connected data only as needed to:

authenticate and maintain the connection between a Stripe account and an Apollo entity, use Stripe role information to authorize app actions, and keep live and test environments isolated;
create Apollo invoices from Stripe payment, customer, invoice, and checkout data at the user’s request;
automatically create invoices for supported events when auto-invoicing is enabled;
display linked invoice and fiscalization status in the Stripe Dashboard;
prevent duplicate documents, secure the service, investigate errors, and provide support; and
meet accounting, tax, fraud-prevention, and other legal obligations that apply to us or our customers.

Our legal bases may include performing the service contract, complying with legal obligations, and our legitimate interests in securing and improving the Stripe App. Where consent is required, it may be withdrawn at any time. Stripe-connected customer and transaction data is not sold or used for advertising.

4. Sharing and international transfers

We disclose Stripe-connected data only to service providers that help us host, secure, maintain, or support Apollo; to tax or fiscal authorities when the connected business has configured a supported submission and disclosure is required; to professional advisers; or to public authorities and other parties when required by law or needed to protect rights and security. Service providers are permitted to process the data only for the services they provide to us and are subject to contractual confidentiality and data-protection obligations.

Data may be processed in countries outside your own. Where applicable law requires it, we use recognized transfer safeguards and require recipients to protect personal data to an appropriate standard.

5. Security and retention

We use administrative, technical, and organizational safeguards designed to protect Stripe-connected data, including encrypted transport, encryption of OAuth tokens at rest, access controls, and monitoring. No system can guarantee absolute security.

We retain connection records, Stripe event data, diagnostic information, and OAuth credentials only for as long as reasonably necessary to provide and secure the Stripe App, honor the customer agreement, and meet legal obligations. Disconnecting Apollo in the Stripe App settings removes the connection and its Apollo API credential for the current Stripe mode. Live and test connections are independent, so each mode must be disconnected separately to stop future app access in both. Invoices and other business records already created in Apollo remain subject to the customer’s normal account-retention settings and any accounting or tax retention requirements. You may request deletion where applicable law permits it.

6. Your choices and rights

A connected business can disable automatic invoice events, disconnect Apollo from the Stripe App settings for each connected mode, revoke access in Stripe, or uninstall the app. Depending on your location and our role for the data, you may have rights to access, correct, delete, restrict or object to processing, receive a portable copy, and withdraw consent. You may also complain to your local data-protection authority.

If your information was supplied to us by a business using the Stripe App, contact that business first. We will help it respond as required. We may need to verify your identity before completing a request.

7. Contact and updates

For privacy questions or rights requests, email support@getapollo.io. The Apollo Terms of Service and the general Apollo Privacy Policy also apply to the service. We may update this notice when the Stripe App, our practices, or applicable law changes; the date above shows the latest revision.

Apollo Invoicing Stripe App Privacy Notice