JAWD is operated by Upsurge Labs LLP. This policy applies when you visit jawd.in, use a JAWD account, contact us, or buy a JAWD product through the Shopify checkout reached from our site.
Who we are
In this policy, “JAWD”, “we”, “us”, and “our” mean Upsurge Labs LLP, the business responsible for the JAWD storefront and branded account experience. Shopify provides the hosted checkout and is the authoritative system for orders, payments, customer records, inventory, and fulfilment.
Questions or privacy requests can be sent to jawd@upsurge.io.
Data we handle
Information you provide to JAWD
- Your email address when you request a one-time login code, create or access a JAWD account, join a waitlist, or contact support.
- Your messages and any information you choose to include when you contact us.
- Your selected products and quantities in the on-site cart. The cart is saved in your browser until you clear it.
Checkout and order information
Shopify collects the checkout information needed to process and deliver an order, which may include your name, email address, phone number, billing and shipping details, items, price, tax, payment status, fulfilment status, and tracking information. JAWD receives a limited copy of order information from Shopify so that we can fulfil orders, provide support, show order history and tracking in your JAWD account, and keep our records aligned with Shopify.
When you arrive from the JAWD ChatGPT plugin, outbound JAWD and Shopify checkout links may include static campaign tags: utm_source=chatgpt, utm_medium=plugin, utm_campaign=jawd_plugin, and utm_content identifying the plugin tool and surface, such as build_cart--inline. These tags help us measure which product surface led to a visit or checkout. They do not contain your name, contact details, user ID, or session ID.
JAWD does not receive or store your full card, UPI, bank-account, wallet, or other payment credentials. Payment is completed through Shopify’s checkout using the payment methods made available there, including Razorpay where offered.
Technical and security information
When you use the site, our hosting and security providers may process standard request information such as IP address, date and time, requested page, browser or device information, and diagnostic or security events. For login rate-limiting, JAWD transforms the requesting IP address into a keyed hash rather than storing the plain address in the login challenge record.
Marketing measurement
The JAWD storefront uses the Meta Pixel on each page visit to measure page visits, product views, and a custom event when a product is added to the local JAWD cart. Meta may receive the event name, product name or SKU, value and currency, the page URL and referrer, browser or device information, IP address, and identifiers stored by the pixel. We do not send your JAWD login email, checkout contact details, address, order data, or payment credentials from jawd.in to the pixel.
At Shopify checkout, the connected Meta integration may measure checkout progress and completed purchases using the same dataset. Depending on the store’s enabled data-sharing setting and applicable privacy requirements, Shopify and Meta may process checkout and order data for measurement, matching, and advertising attribution.
How we use it
We use personal data only for the purposes described here:
- to display products, check live availability, and send your chosen cart to Shopify checkout;
- to process, fulfil, support, cancel, return, or refund orders and keep order status accurate;
- to send one-time login codes and maintain a secure JAWD account session;
- to show your order history and tracking after you verify the checkout email address;
- to send service messages about accounts or orders where JAWD is the agreed sender;
- to prevent abuse, protect the service, troubleshoot errors, and enforce our terms;
- to answer requests, meet legal duties, resolve disputes, and maintain business records;
- to measure campaign performance, understand the path from product view to purchase, and improve our marketing; and
- for any other purpose we clearly explain when asking for your information.
Depending on the context and applicable law, we process data to provide a service or perform a contract with you, with your consent, for a permitted business or security purpose, or to comply with law. You may withdraw consent for consent-based processing, but this does not affect processing already completed or processing required on another lawful basis.
When we share
We do not sell your personal data. We share it only as needed with:
- Shopify, which hosts checkout and manages the authoritative order, customer, payment, inventory, and fulfilment records;
- payment providers available through Shopify, including Razorpay where selected, to authorize and process payment;
- delivery, logistics, and fulfilment providers that need order and address information to deliver your purchase;
- SendGrid, to deliver JAWD one-time login codes and any JAWD-owned service email;
- Cloudflare, for website hosting, network delivery, database and storage infrastructure, and security;
- Meta, for storefront and checkout conversion measurement under applicable privacy settings, to help attribute advertising performance;
- our authorized order team and operational messaging provider. A limited paid-order alert may be sent to a private Telegram operations group and can contain the order number, items, amount, recipient name, one contact detail, city, state, and PIN. It excludes the street address and payment credentials;
- professional advisers, regulators, courts, law enforcement, or another party when reasonably necessary to comply with law, protect rights and safety, investigate fraud, or resolve a dispute; and
- a successor to our business in a merger, financing, reorganisation, or sale, subject to appropriate confidentiality and legal safeguards.
Shopify’s own consumer privacy notice also applies to its handling of checkout data. You can read it at shopify.com/legal/privacy/consumers.
Cookies & local storage
JAWD uses a strictly necessary, secure, HTTP-only session cookie after successful email verification. It keeps you signed in for up to 30 days unless you sign out or the session is revoked. It is not readable by site scripts and is not used for advertising.
The storefront also uses browser local storage to remember product codes and quantities in your cart. That cart data stays on your device until you change the cart, clear browser storage, or your browser removes it.
The Meta Pixel loads when a JAWD page loads and can set or read advertising and measurement cookies and similar identifiers. JAWD does not provide an on-site switch for this storefront measurement. Browser privacy controls, content blockers, or clearing browser cookies and site data may limit or remove these identifiers, although they do not undo processing already completed.
Shopify checkout and linked third-party services may use their own cookies or storage under their own notices and consent settings.
How long we keep data
We keep personal data only for as long as reasonably needed for the purpose for which it was collected, including providing your account and order history, completing fulfilment, meeting tax, accounting, consumer-protection, and other legal duties, handling disputes, preventing fraud, and maintaining security.
Login codes expire after 10 minutes. Account sessions expire after 30 days and can be revoked earlier by signing out. Security records, order records, communications, and backups may remain for longer where needed for the purposes above. When data is no longer required, we delete it, anonymise it, or isolate it until deletion is practical.
How we protect data
We use technical and organisational measures designed to protect personal data. These include server-side credentials, encrypted network transport, signed and revocable sessions, short-lived hashed login codes, request rate limits, access controls, limited operational notifications, and verification of Shopify-originated order events where enabled.
No system is completely secure. Please protect access to your email account, do not share one-time codes, and contact us promptly if you believe your JAWD account or order information has been misused.
Your choices & rights
Subject to applicable law, you may ask us to:
- tell you whether we process your personal data and provide access to it;
- correct or update inaccurate or incomplete information;
- delete personal data that we no longer need or are not required to keep;
- withdraw consent for consent-based processing;
- close or revoke access to your JAWD account; or
- review a privacy grievance.
Send the request from the email connected with your account or order to jawd@upsurge.io. We may need to verify your identity before acting. Some order or payment requests must also be handled by Shopify or the relevant payment provider; we will explain or coordinate that where appropriate. We may retain information where law requires it or where it is needed to establish, exercise, or defend legal claims.
Children
JAWD is not directed to children under 18, and we do not knowingly invite them to create an account or purchase independently. A parent or lawful guardian who believes a child has provided personal data should contact us so we can review and take appropriate action. Product use by a minor must be decided and supervised by a parent or lawful guardian and, where relevant, a qualified professional.
International processing
Some service providers may process data in countries outside India. Where this happens, we use providers and arrangements intended to protect the data and follow applicable transfer restrictions. The privacy and data-protection laws in another country may differ from those in India.
Changes to this policy
We may update this policy when our services, providers, or legal obligations change. The effective date at the top shows the current version. If a change materially affects how we use personal data, we will provide additional notice where reasonably practical or legally required.
Contact & grievances
Upsurge Labs LLP, operating JAWD
Bengaluru, Karnataka, India
jawd@upsurge.io
Use the subject line “Privacy request” or “Privacy grievance” and include enough detail for us to understand the request. Please do not email payment credentials, passwords, or one-time codes.