Privacy Policy
Flying Star GST Capture. Effective 16 October 2026.
Flying Star GST Capture is a Shopify app made by Flying Star Technologies. It lets a store’s business buyers add their GSTIN and business name to an order, so the store can issue a GST invoice. This page explains what the app stores, what it does not, and how to reach us.
What we store
- Your shop address (for example your-store.myshopify.com) and the access token Shopify gives the app, so it can run in your store.
- The GSTIN, business name and GST state a buyer enters. These are saved inside your Shopify store, on the order and on the customer record, as order attributes, an order tag and app data. They are not kept in our database.
- For a few minutes only: a GSTIN entered on the Thank you page before Shopify finishes creating the order. Our database holds it with the order ID until the order exists, then deletes it.
- Your setup checklist, saved in your store as app data.
- Basic details about the staff member who opened the app, such as name and email, only if Shopify provides them at sign-in.
- Standard server logs kept by our hosting provider (request time, page requested and IP address) for security and fixing faults.
What we do not store
We do not keep buyers’ names, emails, phone numbers, addresses or order contents in our database. To build your GST reports and CSV exports, the app reads orders tagged GST B2B from Shopify when you open the report. The report is sent to your browser and not saved on our servers.
How we use data
Only to run the app for your store: to check a GSTIN’s format, save it to the order, show it to you and to the buyer, and build your GST exports. We do not sell data, use it for advertising, or build profiles.
Who we share it with
Shopify, because the app runs on its platform, and our hosting provider, Hostinger, which stores the app’s database. We do not share data with anyone else. We do not send GSTINs to the GST portal or any other service.
Keeping and deleting data
When you uninstall the app, we delete the stored access token, session records and any waiting GSTINs for your shop. When Shopify sends a customer erasure request, we delete any waiting GSTIN for that customer’s orders. When Shopify sends a shop erasure request, we delete everything we hold for the shop. GSTINs already saved on your orders stay in your Shopify store, under your control.
Security
The app is served over HTTPS and every Shopify request is verified before we act on it. Stored records sit in a database that only the app can reach.
Security incidents
If we find a security incident that affects data we hold, we revoke and rotate the app’s credentials, fix the cause, and tell affected merchants and Shopify within 72 hours of confirming it. Access to our hosting, database and Shopify partner accounts is limited to named staff, protected by strong passwords and two step sign in, and access is logged.
Your rights
You can ask us what we hold about your shop, ask us to correct or delete it, or withdraw from the app by uninstalling it. We respond under the rules that apply to you, including the GDPR and India’s Digital Personal Data Protection Act.
Changes
If we change how the app handles data, we will update this page and its date.
Contact
Flying Star Technologies
support@flyingstar.in