ShipForge Privacy Policy

1. Introduction

Welcome to ShipForge.

This Privacy Policy explains how ADROITMINDS SOFTWARE LABS LLP ("AdroitMinds", "ShipForge", "we", "our", or "us") collects, uses, stores, discloses, and protects information when merchants install, access, or use the ShipForge application and any related services we provide (collectively, the "Services").

ShipForge is an embedded Shopify application designed to help merchants configure rule-based shipping options and customize the checkout experience through shipping rules, checkout messages, checkout product recommendations, cart validation, and free shipping progress indicators. In providing these Services, ShipForge processes certain merchant and Shopify platform information necessary to deliver the functionality requested by merchants.

We understand that privacy is important to our merchants and their customers. We are committed to handling personal information responsibly, transparently, and in accordance with applicable privacy and data protection laws.

This Privacy Policy explains:

• what information we collect;
• how we collect and use that information;
• when information may be shared;
• how information is stored and protected;
• how long information is retained;
• the rights available to merchants and individuals regarding their information; and
• how to contact us regarding any privacy-related questions.

By installing, accessing, or using ShipForge, you acknowledge that you have read and understood this Privacy Policy.

2. Scope of this Privacy Policy

This Privacy Policy applies to information processed through ShipForge, including information obtained through Shopify's platform and information provided directly by merchants when using the Services.

This Privacy Policy applies to:

• merchants who install or use ShipForge;
• individuals acting on behalf of merchant businesses;
• information made available to ShipForge through Shopify APIs;
• information collected through our support channels; and
• information processed in connection with the operation and maintenance of the Services.

This Privacy Policy does not apply to:

• Shopify's own products or services;
• information processed directly by Shopify under Shopify's own privacy policies;
• third-party applications or services that integrate with Shopify but are not operated by ADROITMINDS SOFTWARE LABS LLP;
• websites, products, or services that maintain their own independent privacy policies.

Where ShipForge processes information on behalf of a merchant, the merchant remains responsible for ensuring that they have the necessary rights and permissions to use Shopify and the Services in accordance with applicable laws.

3. Definitions

For the purposes of this Privacy Policy, the following definitions apply:

"App"

Refers to the ShipForge Shopify application and any related services provided by ADROITMINDS SOFTWARE LABS LLP.

"Merchant"

Means the Shopify store owner, business, organisation, or authorised user that installs or uses ShipForge.

"Customer"

Means an individual who visits, purchases from, or otherwise interacts with a Merchant's Shopify store.

"Personal Information"

Means any information that identifies, relates to, describes, or can reasonably be associated with an identified or identifiable individual, as defined under applicable privacy laws.

"Shopify"

Means Shopify Inc. and its affiliated companies that provide the Shopify commerce platform.

"Shopify APIs"

Means the application programming interfaces, webhooks, platform services, and other developer services made available by Shopify to support the operation of the App.

"Services"

Means the ShipForge application, its features, related support services, updates, documentation, and any associated functionality provided by ADROITMINDS SOFTWARE LABS LLP.

"Processing"

Means any operation performed on information, including collection, access, storage, use, organisation, disclosure, transmission, deletion, anonymisation, or destruction.

"Merchant Data"

Means information relating to a Merchant's Shopify store, configuration, operational settings, products, orders, customers, or other information made available through Shopify for the purpose of providing the Services.

"Customer Data"

Means information relating to a Merchant's customers that may be processed through Shopify APIs where necessary to provide the Services.

"Applicable Privacy Laws"

Means privacy and data protection laws that may apply to the processing of information, including, where applicable, the General Data Protection Regulation (GDPR), the UK GDPR, the California Consumer Privacy Act (CCPA), the California Privacy Rights Act (CPRA), and other applicable data protection legislation.

4. Information We Collect

ShipForge collects and processes only the information necessary to provide the Services requested by merchants. The information we process depends on how the App is configured, the permissions granted during installation, and the features used by the merchant.

The categories of information described below explain the information that may be collected through ShipForge.

4.1 Information Received Through Shopify

When a merchant installs ShipForge, Shopify authorizes the App to access specific information through Shopify APIs based on the permissions approved by the merchant.

Depending on the App's functionality and the permissions granted, ShipForge may access information including:

• Store identifiers and shop information
• Product information
• Customer information required for configured business rules
• Order information
• Theme information
• Metaobject definitions and related configuration
• Other Shopify resources required to provide the functionality requested by the merchant

ShipForge accesses only the information necessary to deliver its features and services.

4.2 Merchant Information

We collect information provided directly by merchants when configuring or using ShipForge.

This may include:

• Store domain
• Shopify shop identifier
• Merchant configuration settings
• Shipping rule configurations
• Checkout configuration settings
• Checkout message configurations
• Product recommendation rules
• Cart validation settings
• Free shipping progress bar settings
• Operational preferences
• Support enquiries and related correspondence

This information is required to provide, maintain, and support the Services.

4.3 Customer Information

Certain ShipForge features require limited access to information relating to a merchant's customers.

Depending on the merchant's configuration, ShipForge may process information such as:

• Customer identifiers
• Customer tags
• Company information
• Cart contents
• Order value
• Shipping destination
• Products contained within the cart
• Information necessary to determine whether configured business conditions are satisfied

ShipForge processes this information solely to evaluate merchant-defined rules and provide the requested functionality.

Unless required for a specific feature or legal obligation, ShipForge does not intentionally store buyers':

• Full names
• Email addresses
• Telephone numbers
• Postal addresses
• Payment information

Customer information is not used for advertising, behavioural profiling, marketing, or any purpose unrelated to providing the Services.

4.4 Technical Information

To maintain the availability, reliability, and security of the Services, ShipForge automatically generates certain technical and operational information.

This may include:

• Request timestamps
• Application events
• Error logs
• Diagnostic information
• Performance metrics
• System health information
• API request metadata

This information helps us:

• Detect operational issues
• Diagnose software errors
• Improve application reliability
• Monitor system performance
• Protect the security and integrity of the Services

Technical information is not used to profile merchants or their customers.

4.5 Information Provided During Support

If a merchant contacts us for assistance, we may collect information necessary to investigate and resolve the request.

Depending on the nature of the enquiry, this may include:

• Merchant contact information
• Store URL
• Description of the reported issue
• Screenshots or files voluntarily provided by the merchant
• Relevant configuration information
• Correspondence relating to the support request

We use this information solely for providing customer support and improving the quality of our Services.

4.6 Information We Do Not Collect

ShipForge is designed to minimise the amount of personal information it processes.

Unless required for a specific feature, legal obligation, or support request, ShipForge does not intentionally collect or use:

• Payment card information
• Banking information
• Government-issued identification numbers
• Sensitive personal information
• Biometric information
• Health information
• Information for advertising or behavioural profiling

Where personal information becomes available through Shopify APIs, it is processed only to the extent necessary to provide the functionality requested by the merchant.

5. Legal Basis for Processing Information

Where applicable under data protection laws, including the General Data Protection Regulation (GDPR) and the UK GDPR, ShipForge processes personal information based on one or more of the following legal grounds:

Performance of a Contract

Most information processed by ShipForge is necessary to provide the Services requested by merchants after installing and configuring the App.

This includes processing required to:

• Evaluate shipping rules
• Display shipping methods
• Present checkout messages
• Generate product recommendations
• Validate configured checkout conditions
• Display free shipping progress

Legitimate Interests

We may process certain information where it is necessary for our legitimate business interests, provided those interests are not overridden by the rights and freedoms of individuals.

Examples include:

• Maintaining application security
• Preventing misuse of the Services
• Troubleshooting technical issues
• Improving reliability and performance
• Responding to support enquiries
• Maintaining audit logs

Compliance with Legal Obligations

We may process information where necessary to comply with applicable laws, regulations, legal proceedings, or lawful requests from public authorities.

Consent

Where applicable, we rely on the merchant's consent when requesting access to Shopify resources through Shopify's authorisation process.

6. How We Use Information

ShipForge uses the information described in this Privacy Policy solely for legitimate business purposes and to provide the Services requested by merchants.

Specifically, we use information to:

• Authenticate merchants and establish secure access to the App.
• Configure, manage, and maintain merchant-defined shipping rules.
• Evaluate shipping conditions based on merchant-configured business logic.
• Display eligible shipping options during checkout.
• Display checkout messages based on merchant-defined conditions.
• Generate checkout product recommendations according to merchant configuration.
• Validate checkout rules and cart conditions.
• Display free shipping progress indicators.
• Store merchant configuration and application preferences.
• Maintain the security, availability, and integrity of the Services.
• Diagnose software issues and improve application reliability.
• Respond to merchant enquiries and provide customer support.
• Comply with applicable legal, regulatory, or contractual obligations.

ShipForge uses information only for purposes that are compatible with the functionality of the App. We do not use merchant or customer information for advertising, behavioural profiling, or unrelated commercial activities.

7. How We Share Information

ADROITMINDS SOFTWARE LABS LLP does not sell, rent, or trade merchant or customer information.

Information may be shared only in the limited circumstances described below.

7.1 Shopify

ShipForge exchanges information with Shopify only as necessary to provide the functionality requested by merchants.

This includes processing information made available through Shopify APIs, authentication services, and required platform communications.

7.2 Infrastructure and Service Providers

We use trusted third-party service providers to support the operation of ShipForge.

These providers process information only on our behalf and only to the extent necessary to provide the Services.

Our infrastructure currently includes:

• Amazon Web Services (AWS) for cloud hosting and infrastructure.
• PostgreSQL for secure application data storage.

Service providers are contractually or operationally required to maintain appropriate safeguards for information processed on our behalf.

7.3 Legal Requirements

We may disclose information where we believe such disclosure is necessary to:

• Comply with applicable laws or regulations.
• Respond to lawful requests from courts, regulators, or government authorities.
• Protect the rights, property, or safety of ADROITMINDS SOFTWARE LABS LLP, our merchants, or others.
• Investigate suspected fraud, abuse, security incidents, or violations of our Terms of Service.

7.4 Business Transfers

If ADROITMINDS SOFTWARE LABS LLP undergoes a merger, acquisition, corporate restructuring, financing, sale of assets, or similar business transaction, information covered by this Privacy Policy may be transferred as part of that transaction, subject to applicable legal requirements.

Where required by law, affected merchants will be notified of any material changes relating to the processing of their information.

8. Data Security

Protecting merchant information is an important part of operating ShipForge.

We implement reasonable administrative, technical, and organisational measures designed to safeguard information against unauthorised access, alteration, disclosure, misuse, or destruction.

Our security practices include measures such as:

• Secure merchant authentication using Shopify OAuth.
• Encryption of access credentials while stored.
• Secure communication using HTTPS.
• Access controls designed to restrict access to authorised personnel.
• Operational logging to assist with security monitoring and troubleshooting.
• Cloud infrastructure hosted on Amazon Web Services (AWS).
• Application data stored using PostgreSQL.

Although we take reasonable measures to protect information, no method of electronic storage or transmission over the Internet can be guaranteed to be completely secure. Accordingly, we cannot guarantee absolute security.

9. International Data Transfers

ShipForge is hosted using cloud infrastructure located in the United States.

As a result, information processed through the Services may be transferred to, stored, or processed outside the country in which it was originally collected.

Where applicable privacy laws require safeguards for international transfers, ADROITMINDS SOFTWARE LABS LLP will implement appropriate measures designed to provide a level of protection consistent with applicable legal requirements.

By installing or using ShipForge, merchants acknowledge that information may be processed in jurisdictions where the App's infrastructure is operated.

10. Data Retention

We retain information only for as long as necessary to:

• Provide the Services.
• Maintain merchant configurations.
• Meet contractual commitments.
• Resolve disputes.
• Maintain operational records.
• Comply with legal and regulatory obligations.
• Protect the integrity and security of the Services.

The retention period varies depending on the type of information and the purpose for which it was collected.

Following the uninstallation of ShipForge and receipt of the applicable Shopify privacy webhooks, merchant information is deleted or anonymised in accordance with Shopify's platform requirements.

Certain operational records, audit logs, and backup copies may continue to be retained for a limited period where reasonably required for:

• System integrity.
• Disaster recovery.
• Security investigations.
• Compliance with legal obligations.
• Enforcement of our legal rights.

Where information is no longer required, we take reasonable steps to securely delete, anonymise, or otherwise dispose of it.

11. Your Privacy Rights

Depending on your location and the applicable privacy laws, you or the individuals whose information is processed through ShipForge may have certain rights regarding personal information.

Where applicable, these rights may include the ability to:

• Request access to personal information that we hold.
• Request correction of inaccurate or incomplete personal information.
• Request deletion of personal information, subject to applicable legal and contractual obligations.
• Request restriction of certain processing activities.
• Object to the processing of personal information in certain circumstances.
• Request a copy of personal information in a portable format where applicable.
• Withdraw consent where processing is based on consent.

If you wish to exercise any applicable privacy rights, please contact us using the details provided in the Contact Information section of this Privacy Policy.

We may request additional information to verify your identity before responding to privacy-related requests.

Where ShipForge processes customer information on behalf of a merchant, we generally act as a service provider or processor. Customers seeking to exercise their privacy rights should first contact the merchant with whom they interacted. Where appropriate, we will assist merchants in responding to valid requests in accordance with applicable laws and Shopify's platform requirements.

12. Shopify Privacy Webhooks and Data Requests

ShipForge supports Shopify's mandatory privacy webhooks and responds to applicable privacy-related requests received through Shopify.

Where required, we process requests relating to:

• Shop data requests
• Customer data requests
• Customer data erasure requests

Following receipt of applicable Shopify privacy webhooks, ShipForge will process merchant information in accordance with Shopify's platform requirements and our documented data retention practices.

Where information must be retained to comply with legal obligations, resolve disputes, maintain system integrity, or protect the security of the Services, such information may be retained only for the period reasonably necessary for those purposes.

13. Third-Party Services

ShipForge relies on carefully selected third-party service providers to operate and maintain the Services.

These providers process information only as necessary to perform services on our behalf and are not authorised to use such information for their own marketing or unrelated commercial purposes.

Current service providers include:

• Amazon Web Services (AWS) – Cloud infrastructure and hosting.
• Shopify – Platform services, authentication, APIs, and required platform communications.

As ShipForge evolves, additional service providers may be engaged where necessary to support new functionality or improve the reliability of the Services. This Privacy Policy will be updated where material changes to our data processing practices occur.

14. Children's Privacy

ShipForge is a business application intended exclusively for Shopify merchants and commercial use.

The Services are not directed to children, and we do not knowingly collect personal information directly from individuals under the age required by applicable law.

If we become aware that personal information has been collected directly from a child in circumstances where such collection is prohibited by law, we will take reasonable steps to delete that information without undue delay.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in:

• our Services;
• applicable laws or regulatory requirements;
• security practices;
• Shopify platform requirements; or
• our operational practices.

When material changes are made, we will revise the Effective Date shown at the beginning of this Privacy Policy.

Where required by applicable law, we may also provide additional notice regarding significant changes through appropriate communication channels.

Your continued use of ShipForge after the revised Privacy Policy becomes effective constitutes your acknowledgement of the updated Privacy Policy.

16. Contact Information

If you have any questions regarding this Privacy Policy, our privacy practices, or the way ShipForge processes information, please contact us.

ADROITMINDS SOFTWARE LABS LLP

Website https://www.adroitminds.com/

Support Email info@adroitminds.com

Registered Office Use your complete registered Indian office address exactly as it appears in your company registration.

We will make reasonable efforts to respond to legitimate privacy enquiries within a reasonable timeframe and in accordance with applicable legal requirements.

17. Governing Law

This Privacy Policy shall be governed by and interpreted in accordance with the laws of India, without regard to its conflict of law principles.

Nothing in this Privacy Policy limits or excludes any rights that individuals may have under applicable data protection laws in their respective jurisdictions.

18. Questions or Complaints

If you believe that your personal information has been processed in a manner that is inconsistent with this Privacy Policy or applicable law, we encourage you to contact us first so that we can investigate and work towards an appropriate resolution.

Where applicable, individuals may also have the right to lodge a complaint with a competent data protection or supervisory authority in their jurisdiction.