Privacy Policy

Effective date: July 2, 2026

This Privacy Policy describes how FlatInvoice ("the App"), operated by Stelar Digital LLC ("we", "us"), handles information when merchants install and use the App on their Shopify store.

Information the App Accesses

To generate PDF invoices and packing slips at the merchant's request, the App accesses order data from the merchant's Shopify store, including:

Customer name and email address
Billing and shipping addresses
Order line items, quantities, and prices

This data is accessed solely for the purpose of rendering the requested PDF documents.

What We Store

We do not store customer personal data. Order and customer information is processed in memory at render time to produce the PDF and is never written to disk. The only data we retain is:

The shop domain
App settings (template and display preferences)
OAuth session tokens required to operate the App

Data Sharing

We do not share, sell, rent, or disclose any data to third parties. No customer or merchant data leaves our infrastructure, and no third-party analytics or advertising services receive it.

Data Retention and Deletion

Store settings and session tokens are deleted immediately upon app uninstall, triggered by Shopify's shop/redact webhook. Because no customer personal data is stored, there is nothing further to delete.

GDPR and CCPA Compliance

The App honors Shopify's mandatory privacy webhooks in full:

customers/data_request — we respond to customer data access requests; as no customer data is stored, the response reflects that.
customers/redact — customer data erasure requests are honored; no stored customer data exists to erase.
shop/redact — all shop data (settings and sessions) is deleted when a store uninstalls the App.

Security

All data is encrypted in transit using TLS. Because no personal data is retained at rest, there is no stored personal data to secure or breach.

Changes to This Policy

We may update this policy from time to time. Material changes will be reflected on this page with an updated effective date.

Contact

Questions about this policy or your data can be sent to stelardigital@stelardigital.com.