Legal
Privacy Policy
In force. This notice describes how Global Piggy Inc. (Ontario Corporation No. 1001740679), incorporated in Ontario, Canada, handles personal information. We update this page when our handling changes, and the effective date above moves with it.
This policy explains what we collect when you use nodajimarket.com and its subdomains, why, where it goes, and your choices. We comply with Canada's PIPEDA and honour applicable rights under the law of your place of residence (including GDPR rights for EEA/UK customers where they apply).
Data controller: Global Piggy Inc. (Ontario Corporation No. 1001740679), 22 Hughson Street North, Unit 2808, Hamilton, Ontario L8R0B1, Canada — privacy@globalpiggy.com
1. What we collect
| Category | Examples | Why (purpose) |
|---|---|---|
| Order details | items, amounts, order ID | to perform the sale contract |
| Delivery details | name, shipping address, phone (for courier), country | to deliver physical goods; country also determines product availability and tax |
| Contact | receipts, delivery updates, course access, support | |
| Payment references | card and wallet payments are processed by Stripe — we never see or store full card numbers | payment confirmation, refunds, fraud prevention |
| Course activity | lessons unlocked/completed | to provide the course and support |
| Technical | IP, device/browser type, basic analytics events | security, fraud prevention, service improvement |
We do not ask for and do not want: government ID numbers, precise location, or any data about children. The Service is for adults 18+.
2. AI-agent orders
If your AI assistant places an order for you, we receive the same order data listed above, provided by your agent. We treat it exactly as if you submitted it directly. We do not receive your conversations with your assistant.
3. Where your data goes (including outside Canada)
Your information is processed in Canada and in the countries where our service providers operate. In particular:
- Republic of Korea — order fulfilment. For physical goods, your name, shipping address, phone and order contents are shared with our Korean operations partner and the supplier/logistics provider in Korea, solely to pack, export and ship your order.
- Payment processing: Stripe (cards and wallet surfaces) in its operating regions.
- Cloud hosting and accounts: Google Cloud / Firebase. Orders, accounts and uploaded files are stored in the EU region (
europe-west3, Frankfurt, Germany); conversations in our website help chat are stored in Canada (northamerica-northeast2, Toronto) — see §8. Sign-in codes sent by SMS are delivered by Firebase Authentication. - Email: Resend sends receipts, order and delivery updates and replies to support requests.
- Text messages: voip.ms sends shipping and delivery text messages to the delivery phone number you enter (North American numbers only; reply STOP to opt out).
- Address search: Google (Geocoding API) receives the address text you type in the app’s address form, or your device location if you tap “use my location”, to suggest matching addresses. The request goes through our server, so Google does not receive your account or your device’s IP address.
- AI help chat: Anthropic (Claude) or Google (Gemini) generates the assistant’s replies from the messages you send; Telegram carries a short staff alert, with personal details masked, when a chat is passed to a person — see §8.
- Analytics: Google Analytics 4 — see §7.
These providers may process data in the United States and other countries where they operate.
Wherever your data goes, it remains under our contractual instructions and is used only for the purposes above. Foreign jurisdictions may allow their authorities lawful access to data held there.
4. What we never do
We do not sell your personal information. We do not use your data for third-party advertising. We do not share your data with any loyalty or rewards program — the NodajiFi learning ecosystem is a separate system and no personal data flows between it and this store in connection with your purchases.
5. Retention
- Order, invoice and tax records: kept for six years after the end of the tax year they relate to (Canadian tax law). If you delete your account, the order record is kept for that period but separated from your account: your name, street address and phone number are removed, and only the items, amounts, taxes, dates, destination country and postal code remain.
- Course access records: for as long as your entitlement exists, plus 1 year.
- Support correspondence: 2 years.
- Technical logs: 12 months.
Afterwards data is deleted or irreversibly anonymised.
6. Your rights
Subject to applicable law, you may request: access to your data, a copy, correction, deletion (where we are not legally required to keep it), and to object to or restrict certain processing. Write to privacy@globalpiggy.com; we respond within 30 days. You may complain to the Office of the Privacy Commissioner of Canada, or your local authority.
7. Cookies and analytics
The storefront uses only essential cookies (cart/session) and privacy-respecting analytics (Google Analytics 4 in consent mode). In the EEA, the UK and Switzerland analytics storage is denied by default; this site currently has no cookie banner, so no analytics cookie is set there. Elsewhere analytics cookies are set by default for usage statistics. Advertising features are disabled everywhere, and we do not run third-party ad trackers. If you open the help chat, an anonymous session identifier is kept in your browser’s local storage (§8). You can block or delete cookies in your browser settings.
8. AI help chat
The help chat on nodajimarket.com, portal.nodajimarket.com (artisan portal) and the producer pages of globalpiggy.com is answered first by an AI assistant; you can ask for a person at any time. Using it is optional.
- What we collect: the messages you type; an anonymous session ID created when you open the chat (no name, email or sign-up needed); the site and language; timestamps; and your email address only if you choose to leave it so we can reply. To limit abuse we keep a one-way hash of your IP address for 2 days.
- AI processing: your message and the recent conversation are sent to Anthropic (Claude) or Google (Gemini) to generate the reply. Please do not enter card numbers or other sensitive information.
- Passing to a person: our support mailbox receives an email and our staff Telegram group a short alert, both showing your last message with emails, phone numbers, addresses and long numbers masked. If you left an email address, our reply may be emailed to you.
- Where: Toronto, Canada (Google Cloud
northamerica-northeast2). - Retention: conversations and messages are deleted automatically 365 days after they are created. Questions the AI could not answer are kept for 180 days, with personal details masked and without your session ID, to improve answers.
- Deleting: use “Delete chat” in the chat window to erase the conversation immediately, or write to privacy@globalpiggy.com.
9. Security
TLS everywhere; payment card data handled solely by our PCI-compliant processors; secrets management and least-privilege access internally; idempotent payment records to prevent duplicates.
10. Changes and contact
We will post updates here with a new effective date. Questions: privacy@globalpiggy.com.