This Privacy Policy explains how COD Verifier (“we,” “us,” or “our”) collects, uses, stores, and shares information when merchants install and use our Shopify application, and when visitors use this website.
COD Verifier helps Shopify merchants confirm Cash on Delivery (COD) orders before fulfillment. To provide that service, we process certain store, order, and customer contact information through Shopify's APIs and merchant workflows.
1. Who this policy covers
- Merchants who install COD Verifier on a Shopify store.
- Store staff who use the app in Shopify Admin.
- Website visitors who browse this landing page and related legal pages.
- End customers of those merchants, to the extent their order or contact details are processed solely for COD verification on behalf of the merchant.
For end-customer personal data related to a merchant's store, the merchant is typically the data controller. We act as a service provider / data processor and process that data only to provide the COD Verifier service as configured by the merchant and permitted by Shopify.
2. Information we collect
2.1 From Shopify when a merchant installs the app
Depending on the permissions granted during installation and in-app settings, we may access and process:
- Shop name, Shopify domain, shop ID, timezone, currency, and basic store settings needed to run the app.
- Merchant account or staff identity as exposed by Shopify for authentication and support (for example, shop owner email).
- Order data relevant to COD verification, such as order ID, order number, order status, payment method / financial status, line items, totals, shipping method, and timestamps.
- Customer and shipping details associated with those orders, such as name, phone number, email address, and shipping address — used to contact or confirm the order before fulfillment.
- Fulfillment and cancellation status needed to keep verification results aligned with the order lifecycle.
We only request Shopify API scopes required for COD verification and related merchant operations. We do not use Shopify store data for unrelated advertising.
2.2 Information merchants provide directly
- Support requests, feedback, and emails sent to us.
- In-app configuration (verification preferences, notification settings, retention choices where available).
- Billing-related identifiers when you subscribe through Shopify (Shopify handles payment collection).
2.3 Website visitors
This marketing website may automatically receive standard technical data such as IP address, browser type, device type, referring URL, and pages viewed, through normal web server logs or similar tooling. We do not require website visitors to create an account to read this Privacy Policy or Terms.
3. How we use information
We use the information described above to:
- Provide, operate, and maintain COD Verifier.
- Display COD orders that need confirmation and record verification outcomes (for example, confirmed, unreachable, cancelled, or pending).
- Help merchants reduce fraudulent, fake, or unwanted COD orders before shipping.
- Authenticate the merchant's store session and keep the app secure.
- Respond to support requests and troubleshoot issues.
- Improve reliability, prevent abuse, and meet legal or Shopify Partner obligations.
- Send service notices related to the app where appropriate.
We do not sell personal information. We do not use end-customer contact details from merchant stores to market our own products to those customers.
4. Legal bases (where applicable)
If data protection laws that require a legal basis apply (such as GDPR), we rely on one or more of the following, as appropriate:
- Performance of a contract — providing the app services the merchant requested.
- Legitimate interests — securing the service, preventing fraud/abuse, and improving reliability, balanced against individuals' rights.
- Legal obligation — when we must retain or disclose information to comply with law.
- Consent — where we request it, and where consent can be withdrawn.
5. Sharing of information
We may share information only in these situations:
- Shopify — as required to run an embedded or installed Shopify app (authentication, billing, and API exchange).
- Infrastructure providers — hosting, databases, logging, or email tooling that process data on our instructions to operate the app.
- Merchant-directed processing — actions the merchant initiates in the app (for example, contacting a buyer using phone or messaging tools the merchant uses).
- Legal requirements — if required by law, regulation, court order, or to protect rights, safety, and security.
- Business transfers — if we merge, are acquired, or restructure, information may transfer under continued confidentiality commitments.
6. Data retention
We retain store and order-related data for as long as the merchant's installation remains active and as needed to provide verification history and support, unless a shorter period is configured or required.
After a merchant uninstalls COD Verifier, we delete or anonymize personal data obtained through the app within a reasonable period (typically within 30 days), except where we must retain limited records for legal, accounting, dispute, or security reasons. Aggregated, non-identifying statistics may be retained.
7. Data security
We implement reasonable administrative, technical, and organizational measures to protect information, including encrypted connections (HTTPS), access controls, and least-privilege practices. No method of transmission or storage is 100% secure; merchants should also protect their Shopify accounts with strong passwords and available security features.
8. International transfers
Data may be processed or stored in countries other than where the merchant or customer is located. Where required, we use appropriate safeguards for cross-border transfers and rely on Shopify's and our providers' compliance frameworks where applicable.
9. Your rights and choices
Merchants
- Uninstall the app at any time from Shopify Admin to stop new data access.
- Request access, correction, or deletion of merchant account data we hold.
- Manage staff access through Shopify Admin permissions.
End customers
If you are a shopper whose order was verified through a merchant's use of COD Verifier, please contact the merchant first. They control the store relationship and most privacy requests.
Depending on your location, you may have rights to access, correct, delete, restrict, or object to certain processing, or to data portability and to lodge a complaint with a supervisory authority.
10. Children's privacy
COD Verifier is intended for business use by Shopify merchants. It is not directed to children under 16 (or the equivalent age in your jurisdiction), and we do not knowingly collect personal information from children.
11. Shopify App Store and platform terms
Use of COD Verifier is also subject to Shopify's merchant and Partner terms, including Shopify's privacy practices for data processed on its platform. This policy covers our app and this website; it does not replace Shopify's policies.
12. Mandatory GDPR / CCPA-style disclosures (summary)
- Categories collected: identifiers (name, email, phone), commercial information (orders), internet/technical data (logs), and geolocation only as contained in shipping addresses.
- Business purpose: provide COD order verification and related support.
- Sale of personal information: we do not sell personal information as defined under CCPA/CPRA.
- Sensitive data: we do not intentionally collect government IDs, precise geolocation sensors, or payment card numbers; Shopify processes payments for app charges.
13. Changes to this policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. Material changes may be communicated through the app, email, or a notice on this website. Continued use of the app after an update constitutes acceptance of the revised policy where permitted by law.
14. Related
See our Terms & Conditions for the rules that govern use of the app and this website.