POdraft Privacy Policy

Last updated: 1 August 2026

What we collect

POdraft is a Shopify app that turns forwarded purchase-order emails into draft orders. To provide the service we store:

• Your shop domain and an API access token issued by Shopify.
• Inbound purchase-order emails you forward: sender address, subject, attachment content, and the structured data extracted from them (customer name/email/company, line items, quantities).
• The resulting draft order references (Shopify draft order ID and name) once you approve one.

How we use it

Data is used solely to extract and match purchase orders against your product catalog and create draft orders you explicitly approve. Attachment content is sent to Anthropic's Claude API for extraction and is not retained by us beyond what's needed to show you the review queue. We never sell data or use it for advertising.

Where data lives

Data is stored on Cloudflare's global infrastructure (Pages and D1). Inbound email receiving and parsing is handled via Resend. AI extraction is handled via the Anthropic API.

Retention and deletion

Purchase-order records (email metadata, attachment-derived text, extracted line items) are automatically deleted 90 days after they were received, whether or not you acted on them. Uninstalling the app deletes all stored data for your shop immediately. We honor Shopify's GDPR webhooks: customer-redaction requests delete that customer's purchase-order records immediately, shop-redaction requests delete everything immediately, and data-request requests are forwarded to our support address so you can fulfil the request. Full detail: our security & data protection policy.

Contact

Privacy questions: use the support form. See also our security policy.

← Back to POdraft