Last updated: 21 July 2026
These Terms of Service (“Terms”) govern your use of the Kwito application for Shopify (“Kwito”, “we”, “us”). By installing or using Kwito, the merchant (“you”) agrees to these Terms. The Data Processing Agreement in Schedule 1 forms part of these Terms and governs our processing of personal data on your behalf.
Kwito is operated by Noctixal SARL-S (in formation), Luxembourg, 36, rue du Commerce, L-3616 Kayl, Luxembourg. Until incorporation completes, the service is operated by its founder, Charel Lejeune, in Luxembourg. Contact: support@kwito.eu. Our RCS and VAT numbers will be added here once incorporation completes.
Kwito turns paid Belgian B2B Shopify orders into structured Peppol BIS 3.0 e-invoices, sends them over the Peppol network through a certified access point, receives inbound invoices from your suppliers, and archives invoices for the legally required retention period. The exact features available depend on your plan.
You must have a Shopify store and the authority to bind your business to these Terms. You are responsible for the accuracy of the company and tax details you provide, and for keeping your account credentials and Shopify access secure.
Kwito is a tool that helps you meet your e-invoicing obligations. It does not replace your own responsibility for tax and legal compliance. In particular:
We do not provide tax, accounting, or legal advice.
Paid plans and any free trial are billed through Shopify’s billing system in your store’s currency, excluding VAT, according to the pricing shown in the app and on our listing. Sending invoices is the paid feature; receiving invoices is available on every plan, including the free plan. You can change or cancel your plan from within Shopify; charges already incurred are non-refundable except where required by law.
We aim to keep Kwito available and to send invoices promptly, but we do not guarantee uninterrupted or error-free operation. We may perform maintenance, change features, or suspend the service where necessary to protect its security or integrity.
Kwito, its software, and its branding are owned by us. These Terms do not transfer any of our intellectual property to you. Your data remains yours.
These Terms apply for as long as Kwito is installed. You may uninstall Kwito at any time from your Shopify admin. On termination, sending stops, and we handle your invoice archive and personal data as described in our support page and in Schedule 1, section 7. We may suspend or terminate access for a serious or repeated breach of these Terms, or where required by law.
To the extent permitted by law, Kwito is provided “as is”. We are not liable for indirect or consequential loss, or for loss arising from data you supplied that was inaccurate, or from your own failure to meet a tax or retention obligation. Except for liability arising from our gross negligence or intentional fault, and except for any liability that cannot be limited by law, our total aggregate liability to you is limited to the greater of the fees you paid in the 12 months before the event giving rise to the claim, or EUR 500. Any liability we may have towards data subjects under the GDPR is separate and is not capped by this clause. (Liability terms pending legal review.)
These Terms are governed by the laws of the Grand Duchy of Luxembourg, and the courts of Luxembourg City have jurisdiction, without prejudice to any mandatory protections available to you under the law of your place of establishment.
We may update these Terms as the service and its legal registration evolve. We will change the “Last updated” date and, for material changes affecting the Data Processing Agreement, give notice as described in Schedule 1.
Questions about these Terms: support@kwito.eu.
This Data Processing Agreement (“DPA”) forms part of the Terms and applies where Kwito processes personal data on your behalf. It reflects Article 28 of the GDPR.
For the personal data contained in your orders, invoices, and received supplier invoices (“Buyer Data”), you are the controller and Kwito is your processor. Kwito processes Buyer Data only to provide the service to you. (For the account data by which we identify and bill you, Kwito is a controller; that processing is described in our Privacy Policy and is not governed by this DPA.)
Kwito processes Buyer Data only on your documented instructions, which are given by your configuration and use of the app and by these Terms. We will not process Buyer Data for our own purposes, and we do not sell it or use it for advertising, profiling, or AI training. If we are required by EU or member-state law to process beyond your instructions, we will inform you first unless that law prohibits it.
Everyone we authorise to process Buyer Data is bound by an obligation of confidentiality.
We implement appropriate technical and organisational measures, including encryption in transit (TLS) and at rest (AES-256-GCM over buyer personal data, invoice XML, and PDFs), access controls with logging of access to decrypted buyer data, EU data storage, and encrypted backups. Measures are reviewed as the service evolves.
You give general authorisation for Kwito to engage the sub-processors listed in our Privacy Policy, each of which is bound by data protection terms no less protective than this DPA. Change notification: before adding or replacing a sub-processor that processes Buyer Data, we will update the published list and give you at least 30 days’ prior notice (by email or in-app). If you reasonably object on data protection grounds within that period, you may raise it with us and, if we cannot resolve it, you may terminate by uninstalling before the change takes effect.
On termination, and subject to your statutory retention obligation, we will export your invoice archive (UBL XML and PDFs) and make it available to you for 30 days, after which we delete your Buyer Data and account data from Kwito and instruct our sub-processors to do the same, unless EU or member-state law requires further storage. Because invoices carry a 10-year retention obligation that is yours as controller, you are responsible for retaining the export.
Buyer Data is stored and processed in the EU. Where a sub-processor involves a country outside the EEA, the transfer relies on an adequacy decision, Standard Contractual Clauses, or the EU-U.S. Data Privacy Framework, as described in our Privacy Policy.
If there is a conflict between the body of the Terms and this DPA on the processing of Buyer Data, this DPA prevails.