Order Intake
Privacy policy
Order Intake turns purchase orders your buyers email you into Shopify draft orders. Those emails contain other people's business details, so this page states exactly what we touch and — more importantly — what we deliberately do not keep.
What we read from your store
After you install the app we hold access tokens for your shop, encrypted at rest with AES-GCM. We use them to:
- look up product variants by SKU, barcode or name, so order lines can be matched to your catalogue;
- look up a customer by the exact sender address of the order email, so the draft can be attached to the right account;
- create a draft order when you press the button.
We never complete an order, charge a card, or change inventory. The app has no code path that does any of those things.
What happens to an order email
Mail sent to your intake address at cardiworkshop.com is read once, in memory, and then discarded. We do not store the original email or its attachments. What we keep is the order table we extracted from it:
- the sender address, subject line and attachment file name;
- for each order line: the SKU, barcode, description, quantity and unit price as written in the document, plus which column each came from;
- any correction you make in the review screen;
- the id of the draft order created from it, if you created one.
Anything else in the document — addresses, contact names, contract terms, logos, other sheets — is never written to storage.
What we store about you
- Your shop domain and your encrypted Shopify tokens.
- The notification email address you enter, if you enter one.
- Anonymous monthly counters of how the app is used (documents received, parsed, failed, drafts created). These contain no shop identifier and no document content.
Who else sees it
- Cloudflare — Email Routing receives the mail; Workers and KV run the app and store everything listed above.
- Shopify — the Admin API calls described above.
- Resend — delivery of the "an order arrived" notification, if you turn it on. Resend receives your notification address, the sender address and the subject line of the order email. It never receives the order lines.
We do not sell, rent or share your data with anyone else, we do not use it for advertising, and we do not use it to train models.
Retention and deletion
Extracted documents are deleted automatically 90 days after they arrive, and we keep at most the 200 most recent per shop. When you uninstall, Shopify sends an app/uninstalled webhook and we delete your tokens, settings and every stored document. You can also request deletion at any time at cardi.workshop@gmail.com.
We implement Shopify's mandatory compliance webhooks (customers/data_request, customers/redact, shop/redact). Shop redaction deletes everything listed above.
Contact
Questions about this policy, or about data we hold: cardi.workshop@gmail.com.