Privacy Policy

GST Invoicer (the “App”) · Effective 25 September 2026

This policy explains what data the App collects from a Shopify store that installs it, why it collects it, who it is shared with, and how long it is kept. The App generates GST-compliant tax invoices and credit notes for Indian merchants; every category of data below is collected for that purpose and no other.

1. Who we are

The App is published by Shivani Bhadauria, a sole proprietor trading as Esby, based in India. For the data described in this policy we act as a data processor on behalf of the merchant who installs the App; the merchant remains the controller of their own customers’ data.

Contact: support@esby.app

2. What the App collects

2.1 Store and merchant data

Your .myshopify.com store domain and installation status.
Your GST registration details, which you enter yourself: GSTIN, legal business name, registered address, and the derived state code.
Optional invoice branding you provide: logo image, accent colour, invoice notes or terms, contact phone, contact email, and website.
Tax configuration: whether storefront prices include GST, per-product HSN codes and GST rates, and your invoice number series.
Your subscription plan.
A record that you accepted the App’s terms of service: the date and time, which version of the terms you were shown, and — so that the record means something if it is ever questioned — the IP address and browser user-agent the acceptance was sent from. This is kept for as long as the App is installed and is deleted with everything else when you uninstall.

2.2 Shopify authentication data

Shopify issues the App an access token so it can read the orders needed to build invoices. Alongside it we store the session record Shopify provides, which may include the store user’s ID, first and last name, email address, locale, and whether they are the account owner.

2.3 Order and customer data

When an order is paid, or a refund is created, Shopify sends the App a webhook. From it we store:

The order identifier and order number, the refund identifier for credit notes.
The buyer’s name, email address, and GSTIN where supplied, plus the place of supply.
Line items, taxable value, the CGST / SGST / IGST / cess breakdown, and the invoice total.
The raw webhook payload for the order, sent to us by Shopify. We keep it so invoice generation can be retried if it fails, and so an invoice can be recalculated if you later correct the buyer’s GSTIN or reassign it to a different GST registration. It can contain the customer’s phone number and billing or shipping address. It is retained for as long as the invoice it belongs to, and is deleted with everything else 48 hours after you uninstall the App. It is also scrubbed immediately on a customer erasure request, regardless of that period.

2.4 Generated documents

The App stores the invoice and credit note PDFs it renders. These contain the merchant and buyer details listed above, as tax law requires.

2.5 Support messages

When you use “Contact support” inside the App, we receive the message you write, the reply address shown in the form (which you may change), and a short summary of your store so we can help without asking you to look things up: your store name and domain, your plan and this month’s invoice count, whether your GST registration details are filled in, whether your prices are tax-inclusive, how many invoices are currently waiting, and how many invoice jobs have failed or been skipped in the last 7 days. If you give an order number, we also include that order’s invoice status and any error recorded against it. No customer names, addresses or contact details are included. Support messages go to our email inbox and are not stored in the App’s database.

2.6 Installation and onboarding notifications

When a store installs or uninstalls the App, we send ourselves an operational notification containing the store name, domain, merchant contact email where Shopify provides it, and the time of the event. One follow-up notification summarises saved setup milestones such as terms acceptance, GST registrations, product tax mappings, onboarding status, plan, document counts, and processing errors. We do not record page views or clicks, and these notifications contain no buyer names, buyer email addresses, order contents, or raw webhook data.

2.7 Live-chat support

The App offers optional live-chat support through tawk.to. The service does not load merely because you open the App; it loads only after you select the live-chat button. At that point tawk.to may process your IP address, browser and device information, the App page you are viewing, chat session identifiers, and cookies or browser storage needed to operate the chat. It also processes anything you choose to enter in the chat, such as your name, email address, and message. Please do not send customer personal information, passwords, payment details, or other sensitive information through live chat.

3. What we do not do

We do not sell or rent any data.
We do not use your data or your customers’ data for advertising.
We do not use it to train machine-learning models, and we do not share it with data brokers.
We do not run third-party advertising scripts inside the App.
The optional tawk.to support widget uses technical information, cookies, and browser storage only to provide and maintain live-chat support as described in this policy.

4. How the data is used

To calculate GST and generate numbered invoices and credit notes.
To email the invoice or credit note, with its PDF attached, to the buyer’s email address from the order.
To produce the reports and exports you request, such as GSTR-1 spreadsheets, Tally XML, and bulk PDF downloads.
To show you the status of invoice generation and to retry failed jobs.
To monitor installation and onboarding progress so we can identify setup problems and improve the App.
To provide live-chat support and maintain the history needed to respond to your support requests.

5. Service providers

The App relies on a small number of processors. Each receives only what it needs to perform its function, and none is permitted to use the data for its own purposes.

Provider	Purpose	Data involved
Shopify	Source of order data; hosts the embedded app	Orders, refunds, products, session
Render	Application hosting	All data in transit through the App
Neon	PostgreSQL database	All stored data described above
Resend	Sending invoice, support, and operational email	Buyer name, buyer email and invoice PDF for invoice delivery; store name, domain, merchant contact email and setup summary for operational notifications
tawk.to	Optional live-chat support	IP address, browser and device information, current App page, chat identifiers and storage, and information you submit in a chat

These providers operate servers outside India, including in the United States, so data covered by this policy may be transferred and processed outside India.

6. How long we keep it

A tax invoice is a statutory record. Section 36 of the CGST Act, 2017 requires the records underlying it to be retained for approximately six years. The App is built around that obligation:

Customer erasure request. On Shopify’s customers/redact request we anonymise the buyer’s name and delete the buyer’s email from the affected invoices and credit notes, and we scrub the stored raw order payload, which removes the phone number and address. The tax figures, invoice number, GSTIN and place of supply are preserved, because deleting them would destroy a record we are legally required to keep.
Uninstall. Shopify sends a shop/redact request 48 hours after the App is uninstalled. At that point we permanently delete everything belonging to the store — settings, GST profiles, invoices, credit notes, stored PDFs, processing jobs, and sessions, including the stored installation-notification record.
Raw webhook payloads are working data, not records, and are scrubbed on a redaction request regardless of the invoice retention period.
Live-chat data. tawk.to may retain chat transcripts and related technical data until we delete them from the service. You can ask us to delete a support conversation by contacting us at the email address below, subject to any legal retention obligation.

7. Data requests and your rights

If you are a shopper, the merchant you bought from is the controller of your data. Send your access or deletion request to that merchant; Shopify forwards it to us automatically and the App responds as described in section 6.

If you are a merchant, you can export your invoice data at any time from inside the App, and uninstalling triggers the deletion described above. For anything else, including access, correction, or deletion requests, write to support@esby.app. We aim to respond within 30 days.

8. Security

All traffic to the App is served over HTTPS.
Every incoming Shopify webhook is HMAC-verified before it is accepted.
Credentials and API keys are held in server-side environment variables, never in the codebase or the browser.
The database is not publicly reachable and requires TLS.

No system is perfectly secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your data we will notify affected merchants without undue delay.

9. Children

The App is a business tool sold to merchants. It is not directed at children and we do not knowingly collect data from them.

10. Changes to this policy

We may update this policy as the App changes. The effective date at the top reflects the current version, and material changes will be communicated to installed merchants.

11. Contact

Shivani Bhadauria, sole proprietor trading as Esby — India
support@esby.app