Privacy Policy

1. Who we are

ItsCOD: COD Fee & Partial COD ("the app") is a Shopify app made by ItsCOD. It charges a fee on Cash on Delivery orders and lets buyers pay a deposit online, with the rest paid on delivery. When you install the app on your store, you are the data controller for your store's data and your customers' personal data. We act as a data processor that runs the app on your behalf.

2. What we don't do

• We don't sell your data or your customers' data.
• We don't share data with advertisers, data brokers or anyone else for marketing.
• We don't profile customers across stores. Each store's data stays with that store.
• We don't use your data to train AI or machine-learning models.
• We only ask for the Shopify permissions the app needs to add fees and balances to orders and to store its settings.

3. Store data we use

To run the app and bill you, we keep a few details about your store: its domain, name, contact email and owner's name, its currency and money format, its Shopify plan, your app plan, your monthly count of Cash on Delivery orders, and the language your usage emails are written in (the admin language of the last staff member who opened the app).

Your settings (COD fees, deposit options, rules, widget design and texts) are saved in your own Shopify store, as the app's metaobjects and metafields, where Shopify's checkout and your theme read them. We don't keep a copy of them on our servers.

4. Customer and order data

When an order is placed, Shopify sends it to the app. The app reads only what it needs to work out the COD fee or the balance due: the products and prices, the payment method, the shipping and billing country, and the customer's tags. It then edits the order in Shopify, adding a "Cash on Delivery fee" or "Balance due on delivery" line and a tag.

We don't store your customers' names, addresses, emails or phone numbers. The only order data we keep is the order ID and whether it was a COD or a partial payment order, so the same order is never handled twice.

At checkout, the fee and the deposit are calculated by Shopify Functions, which run on Shopify. On your storefront, the widget runs in the buyer's browser. It remembers the deposit option the buyer chose for the current visit only, in the browser's session storage, and sets no cookies.

5. Storage and retention

The app's own database stores only:

• Shopify sessions (the app needs them to work)
• Your plan, usage counters and the store details in section 3
• The IDs of the orders the app already handled
• Subscription discount code usage, if you redeem one
• The time of your last support message

When you uninstall the app, your sessions are deleted right away. Your plan and usage are kept so the free plan's quota can't be reset by reinstalling. Everything we hold for your store is deleted when Shopify sends its shop data deletion request, 48 hours after you uninstall.

6. Emails and support messages

When your store reaches 80% and 100% of its monthly COD orders, we email your store's contact address. These emails contain your store name, the owner's first name, your plan, your usage and the reset date, never customer data.

When you send a message from the support button in the app, we receive your name, the email address you enter, your message, your store domain and your plan, so we can reply. We use them only to answer you. We don't use your email for marketing and we don't share it.

7. Subprocessors

The app relies on these services:

• Shopify: the platform. Your store, your orders and the app's checkout functions run on Shopify.
• Google LLC: Gmail, to send the usage emails, and Google Sheets, where support messages arrive.
• Our cloud hosting provider: runs the app and its database.

No other third party processes your data.

8. Security

• Sign-in uses Shopify's OAuth. We never see your Shopify password.
• Webhook requests from Shopify are verified with HMAC signatures before anything happens.
• All traffic to the app is served over HTTPS.
• Access tokens stay on the server and are never sent to the browser or the storefront.
• Every protected request checks the signed-in store before reading or writing its data.

9. Your customers' privacy requests

The app answers Shopify's privacy webhooks. Because we store no customer personal data, a customer's data request or erasure request needs no further action on our side. Your store's data is erased as described in section 5.

10. Children

The app is not directed at children under 13 (or 16 in the EU) and should not be used to knowingly collect personal data from minors. If your customers may be minors, you are responsible for getting the consents your law requires.

11. Changes to this policy

We may update this policy. When we do, the "Last updated" date at the top changes. Using the app after a change means you accept the updated policy.

12. Contact

Questions about this policy or how the app handles your data? Email support@itscod.com. Our Terms of Service apply too.