Privacy policy.
Last updated 7 August 2026
Ordally is a Shopify app that helps merchants predict which orders are likely to fail delivery, and answer their customers' questions about orders. It is operated by Akhil Mukkara, India. Contact: akhil.mukkara@gmail.com.
When a merchant installs Ordally, the merchant is the controller of their customers' personal data and Ordally is a processor acting on their instructions.
What we process, and why
| Data | Why | Stored? |
|---|---|---|
| Customer name | Identifying an order in the merchant's risk queue | No |
| Postal code and city | Calculating failed-delivery rates by area, the main risk signal | No |
| Phone number | Building a WhatsApp link so the merchant can confirm a cash-on-delivery order before shipping | No |
| Email address | Looking up an order, and replying to a customer's own enquiry | Yes, with the enquiry |
| Order details | Payment method, delivery outcome and order history, used to estimate risk | No |
We do not use street address or geolocation. We do not sell personal data, share it with advertisers, or use it to build profiles across merchants. Each merchant's data is used only for that merchant.
How long we keep it
- Order and customer data read from Shopify is held in memory for at most 15 minutes and is never written to disk.
- Support enquiries — the customer's email address and the text of the exchange — are permanently deleted 180 days after they are created.
- Merchant settings and login sessions are kept while the app is installed, and deleted when the merchant uninstalls.
Who else processes this data
- Shopify — the source of all order and customer data.
- Railway — hosting and database storage, encrypted at rest.
- Resend — sending email to merchants and, at the merchant's instruction, to their customers.
- Google (Gemini API) — when a customer submits a question through the merchant's support page, the question text and the related order details are sent to Google to draft a suggested reply. The merchant reviews and approves every reply before it is sent; Ordally never replies automatically.
Automated risk scoring
Ordally estimates how likely an order is to be returned undelivered, using the merchant's own past orders — payment method, destination postal code, and whether the buyer has ordered before. This is shown to the merchant as a score with the reasons behind it.
Ordally does not cancel, hold or reject any order. Every decision is made by the merchant.
Security
All traffic is encrypted in transit over HTTPS. Stored data is encrypted at rest. Access is limited to the sole operator, protected by unique credentials and two-factor authentication.
Your rights
If you are a customer of a store using Ordally, contact that store first — they control your data and we act on their instructions. We support Shopify's data request, customer deletion and shop deletion webhooks, and respond to requests forwarded through them.
You can also write to akhil.mukkara@gmail.com.
Changes
Material changes will be reflected here with a new date above. Merchants will be notified by email of changes affecting what data is processed.