Privacy policy

Spare Hands Tax Invoice AU NZ (the "App") is published by Spare Hands, Australia. This policy explains what the App stores, why, and how merchants and their customers can have it removed. Last updated 8 October 2026.

What the App does

The App lets a Shopify merchant generate GST tax invoices and credit notes for orders they choose, print or download them, optionally email them to the customer, and export a GST report. It runs inside the Shopify admin.

Data we collect from merchants

• The store's myshopify.com domain and a Shopify access token, needed to read orders.
• Settings the merchant enters: business name, ABN or GST number, address, support email, logo link, numbering preferences, footer text and email templates.
• Plan and usage counters (number of invoices generated per month) for billing through Shopify.

Data we collect about customers

When a merchant generates an invoice, the App reads the order from Shopify and stores an immutable copy (a "snapshot") of the information a tax invoice must show: order number and dates, line items, prices, taxes and discounts, and the buyer's name, company, billing or shipping address and, when the merchant uses the email feature, the customer's email address. The buyer's ABN or GST number is included only if the merchant chose to print it and the order carries one.

Snapshots exist so that an issued invoice can be reprinted exactly as it was, which tax law requires. We do not use customer data for any other purpose, do not sell it, and do not use it for advertising or profiling.

Emails

If the merchant turns on automatic emails, the App sends the invoice PDF to the customer email on the order through our email provider, Resend. The sender is an address on our own domain; replies go to the merchant's support email. Delivery status is logged against the invoice.

Where data is stored

The App is hosted on Fly.io in Sydney, Australia. Data is encrypted in transit (HTTPS) and at rest. Access is limited to the operator for support and maintenance.

How long we keep it

• Invoice snapshots are kept while the App is installed, because merchants need to reprint past invoices.
• When the App is uninstalled, Shopify's access tokens are deleted immediately and all remaining store data, including every snapshot, is deleted when Shopify sends the shop/redact request 48 hours later.
• Webhook receipts and job logs are pruned automatically after a short period.

Customer requests

The App honours Shopify's customers/data_request andcustomers/redact requests. On a redaction request, personal details are removed from the affected snapshots while the financial figures, which the merchant must keep for tax purposes, remain. Merchants can also contact us at aa103228@gmail.com.

Third parties

• Shopify: order data and billing.
• Fly.io: hosting and database.
• Resend: email delivery, only when the email feature is enabled.

Changes

We will post changes to this policy at this address and update the date above.

Contact

Spare Hands, Australia. Email aa103228@gmail.com.