Privacy Policy — AppSaaz Automated GST Invoice, by AppSaaz Labs

Last updated: October 3, 2026

What this app does

AppSaaz Automated GST Invoice ("the app", "we", "us"), built by AppSaaz Labs, reads a merchant's Shopify orders, customers, and products to generate GST-compliant tax invoices, credit notes, debit notes, and GSTR-1/GSTR-3B return filing exports, and can file GSTR-1 on the GST portal once the merchant approves it. Unlike accounting-sync apps, we do not send merchant data to any third-party bookkeeping platform.

Data we process

For each order, refund, or cancellation, we process:

• Customer name, email, and shipping/billing address — used to populate the invoice/credit note and to determine place of supply (CGST+SGST vs IGST).
• Customer GSTIN, when provided at checkout — used to mark the invoice as B2B.
• Order line items, prices, quantities, discounts, and shipping — used to compute GST and build the invoice.
• Product HSN/SAC codes and GST rates, as configured by the merchant.
• Merchant shop settings — Shopify domain, legal business name, business address, GSTIN, state code, and app configuration — used to configure tax settings and format invoice headers.
• GST portal details, only if the merchant files from inside the app — the GST portal username and the authorised signatory's PAN, stored encrypted. We never see or store the portal password; the merchant signs in with a one-time code sent to their own registered mobile.

We do not process payment card details.

Customer phone number. The phone number on a Shopify order is used only when the merchant turns on one of two settings: printing the buyer's phone on the document (Design your documents › Buyer), which some buyers ask for on a GST tax invoice, or sending the document to the buyer on WhatsApp. When either is on, the number is stored on the invoice record with the rest of the billing address and printed or sent as the setting says. When both are off — the default — the phone field on the order is discarded and never stored or printed on any document. It is never used for marketing or shared with anyone but the buyer it belongs to.

How the data is used

Invoice data is used solely to generate and store the merchant's own GST records, and to email the invoice to the customer if the merchant enables that. It is never used for marketing, advertising, analytics, or profiling, and it is never sold.

How the data is stored and secured

• Webhook payloads awaiting processing are encrypted at rest (AES-256-GCM) and cleared immediately after successful processing; failed jobs retain their payload for up to 90 days for debugging, then it's cleared.
• All communication with Shopify happens over HTTPS.
• Data is hosted and processed on cloud infrastructure provided by Fly.io, in their Singapore (sin) region.
• Backups. The database is backed up continuously to object storage (Tigris, reached through Fly.io) and, once a day, as a dated snapshot kept for one year. One copy of that daily snapshot is stored on Google Drive so that a backup exists outside our hosting provider. That copy is encrypted before it leaves our servers, with a key Google does not hold, so it cannot be read by Google or by anyone who obtains the file.
• Generated invoices/credit notes/debit notes are not deleted on a customer-redact request — see "Data retention" below for why.

Data retention

Indian GST law (CGST Rules) requires merchants to retain tax invoices, credit notes, and debit notes for several years from the due date of the relevant annual return. Because of this:

• Invoice, credit note, and debit note records are retained even after a Shopify customers/redact or shop/redact webhook, since they are the merchant's statutory tax records, not marketing data.
• Queued webhook job payloads are deleted automatically immediately after they're processed successfully.
• All other shop data (settings, GSTIN/HSN configuration, queued webhook jobs, session, billing state) is deleted automatically on shop/redact — Shopify fires this ~48 hours after uninstall.
• Queued webhook job payloads matching a customers/redact request are scrubbed immediately, regardless of normal retention windows.

Third parties

We share data only with the following sub-processors:

• Resend (privacy policy) — only if the merchant enables automatic invoice emailing, to deliver the PDF to the customer's email address.
• Crisp (privacy policy) — only if the merchant uses the in-app chat, to carry the conversation between the merchant and our support team. Crisp sees the store's domain and what is typed into the chat; it is never loaded on the storefront and never sees a customer.
• Shopify (privacy policy) — as the platform this app is built on.
• Fly.io (privacy policy) — our cloud hosting provider; the app and its live database run on their infrastructure, and the continuous backup is held in object storage (Tigris) reached through them.
• Google (privacy policy) — holds one encrypted copy of the daily database backup on Google Drive, so that a backup survives the loss of our hosting provider. Google stores the file as encrypted data only and has no key to read it.
• Sandbox by Quicko (privacy policy) — a GST Suvidha Provider (GSP), the licensed gateway between software and the government's GST portal. Used in two cases only. First, if the merchant turns on GSTIN lookup, a buyer's GSTIN is sent to fetch the registered business name and address from the GST portal. Second, if the merchant files GSTR-1 from inside the app, the return is sent through Quicko to the GST portal. The return holds invoice numbers, dates, values, tax amounts, buyers' GSTINs, place of supply and HSN summaries, with the merchant's GSTIN, portal username and signatory PAN. Customer names, emails and addresses are not part of a GST return and are not sent.

Data reaches a government system only through this GSP, and only for something the merchant has turned on or asked for: a GSTIN lookup, or a GSTR-1 the merchant sends and files.

Data subject rights & Shopify privacy requests

This app receives and handles Shopify's three mandatory privacy webhooks:

• customers/data_request — when a customer asks what data we hold about them, we don't auto-export it outside the app; we log any matching invoices (by email) so the merchant can find and share them from their dashboard.
• customers/redact — when a customer requests erasure, any queued (not-yet-processed) webhook data matching them is scrubbed immediately. Issued invoices, credit notes, and debit notes are not deleted, because CGST Rules require merchants to retain them as statutory tax records for several years, independent of an erasure request made under GDPR or India's DPDP Act.
• shop/redact — sent ~48 hours after a merchant uninstalls; all operational data (settings, GSTIN/HSN configuration, sessions, queued jobs, billing state) is deleted automatically. Statutory tax records are retained for the same reason.

Since this app processes data on behalf of merchants (as a data processor under GDPR, and under India's DPDP Act, not the data controller), a customer's request to access, correct, or delete their personal data should go to the merchant whose store they purchased from, subject to the merchant's own statutory GST record-keeping obligations. The merchant can contact us at support@getsaaz.app for help fulfilling such requests.

Changes to this policy

We'll update the "Last updated" date above whenever this policy changes. For any change that materially affects how personal data is processed, we'll email connected merchants at their Shopify-registered account email at least 14 days before the change takes effect.

Contact

support@getsaaz.app — see also our Terms of Service.