Effective date: September 17, 2026
Operator: Mindarora LLP, No 03, Hesaraghatta Main Road, Mallasandra, T.Dasarahalli, Bangalore - 560057.
Privacy contact: support@globesword.com
1. Scope
This Privacy Policy applies to Globesword's website, Shopify app, order intake inboxes, dashboards, support communications, and related services. Globesword helps Shopify merchants process customer order emails and attachments into Shopify Draft Orders for merchant review.
2. Our role
For information processed from a merchant's Shopify store, order emails, customers, products, and draft orders, the merchant is generally the controller or business owner, and Globesword acts as a processor or service provider. For information submitted directly to Globesword, such as demo requests, support messages, or job applications, Globesword may act as the controller.
3. Data Globesword processes
- Incoming email content: order email body text, sender and recipient details, subject lines, forwarded order instructions, and attachments such as PDFs, images, spreadsheets, CSVs, or text files.
- Shopify customer information: customer name, email, phone number, Shopify customer ID, default address, and shipping details needed to identify the correct customer.
- Shopify product and inventory information: product titles, variant titles, SKUs, product and variant IDs, prices, and inventory quantities needed to identify requested items and confirm availability.
- Draft order information: line items, quantities, shipping address, customer match, notes, purchase order references, requested delivery dates, draft order IDs, draft order status, and totals.
- Account and usage information: business name, user email, team access, subscription status, free test order usage, settings, logs, diagnostics, and support messages.
- Website information: basic technical information such as pages visited, device/browser details, timestamps, and security logs.
4. Why we process data
Globesword processes data to read customer order emails and attachments, extract structured order details, identify Shopify customers, match Shopify products and inventory, create Shopify Draft Orders, let merchants review and edit draft order fields, provide support, secure the service, manage subscriptions, troubleshoot errors, and comply with legal obligations.
5. Shopify permissions
Globesword requests only the Shopify permissions needed for order intake workflows, such as reading customers, reading products and inventory, and reading or writing draft orders. We do not use Shopify data for unrelated advertising or sell Shopify merchant or customer data.
6. AI processing
Globesword may use AI models to extract order details from email text and attachments. We aim to send only the information needed to identify order fields, customers, products, quantities, shipping details, and merchant instructions. Merchants should avoid forwarding unnecessary sensitive information.
7. Where data is processed
Data may be processed in the European Economic Area, the United Kingdom, the United States, India, and other countries where Globesword or its service providers operate. Where required, Globesword uses appropriate safeguards for international transfers, such as contractual protections and data processing terms.
8. Retention
We retain account, order intake, extracted order, and draft order records while an account is active so merchants can review, edit, audit, and troubleshoot order processing. We delete or anonymize data when it is no longer needed, when a merchant requests deletion, when a Shopify compliance deletion request applies, or when legally required. Some limited records may be kept longer when necessary for billing, security, fraud prevention, dispute resolution, or legal obligations.
9. Deletion and access requests
Merchants can request access, correction, export, or deletion of their account data by contacting us. For Shopify customer privacy requests, Globesword supports Shopify's required compliance workflows for customer data requests, customer redaction, and shop redaction. Customer redaction requests delete matching customer order intake records. Shop redaction requests remove the Shopify connection and related order intake data for that shop, subject to legal retention obligations.
10. Subprocessors
Globesword uses trusted subprocessors to operate the service, including providers for hosting, storage, authentication, email processing, AI extraction, payments, monitoring, security, and Shopify platform services. These subprocessors process data only as needed to provide Globesword and are expected to protect data under appropriate contractual obligations.
11. Sharing
We do not sell personal information. We may share data with subprocessors, customer-authorized integrations, professional advisers, legal authorities where required, or parties involved in a business transfer such as a merger, acquisition, financing, restructuring, or sale of assets.
12. Security
Globesword uses reasonable technical and organizational measures designed to protect information, including access controls, encryption in transit, limited internal access, logging, monitoring, and secure development practices. No online service can guarantee complete security.
13. GDPR and privacy rights
Where GDPR or similar laws apply, individuals may have rights to access, correct, delete, restrict, object to, or export personal data. If data was provided to Globesword by a merchant, we may direct the request to that merchant or support the merchant in responding. You may also have the right to complain to a data protection authority.
14. Children
Globesword is a business service for merchants and is not directed to children. We do not knowingly collect personal information from children through the service.
15. Contact
For privacy questions, access requests, deletion requests, or GDPR requests, contact support@globesword.com.
16. Changes
We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised effective date where appropriate.