Privacy policy
Last updated 21 September 2026
COD+ is a Shopify app that lets merchants take cash-on-delivery orders through a form on their storefront, confirm them by phone, and report conversions to advertising platforms. This policy explains what data the app processes, for whom, and for how long.
Who we are
COD+ acts as a data processor on behalf of the merchant (the Shopify store) who installs the app. The merchant is the data controller of their shoppers' data. Contact: support@codplus.app.
Data we process and why
| Data | Source | Why | Kept |
|---|---|---|---|
| Shop name, domain, currency, country, plan | Shopify (OAuth) | Run the app for that store, bill through Shopify | Until 48 h after uninstall |
| Shopper name, phone, city, address | Entered by the shopper in the COD form | Create the order in Shopify, let the merchant confirm it by phone, let the shopper see their own orders | Until the merchant uninstalls (48 h) or a customer-erasure request |
| Order contents and amounts | Shopify draft order / order | Show the merchant their COD orders, count usage for billing | Same as above |
| Attribution: landing page, referrer, UTM, ad click ids (gclid, fbc/fbp, ttp), IP, user agent | Shopper's browser when the form is used | Tell the merchant which ad brought the order; send the purchase to Meta / TikTok / Google if the merchant connected them | Same as above |
| Merchant's API tokens (Meta, TikTok, WhatsApp, Zoko) | Entered by the merchant | Send events / codes on the merchant's behalf | Encrypted at rest; deleted with the shop |
| Sign-in codes for the customer account | Generated by the app | Verify the shopper's phone | Hashed, 5 minutes |
| Phones marked as fraudulent by the merchant | Merchant action | Refuse further orders from that number in that store | Until the merchant unblocks or uninstalls |
Where data goes
- Shopify — every order is created in the merchant's Shopify store; Shopify's own privacy policy applies there.
- Meta, TikTok, Google — only when the merchant connects them, the app sends purchase events with hashed identifiers (phone, name, city) and the browser identifiers those platforms already set, so the merchant's ads can be measured. No data is sent to advertising platforms the merchant did not connect.
- WhatsApp (Meta) / Zoko — only to deliver a sign-in code the shopper requested.
- Hosting: servers in the European Union (Frankfurt). Data is not sold or shared with anyone else.
Your rights (shoppers)
Ask the store you ordered from to access, correct or delete your data. The app honours Shopify's customer data requests and erasure webhooks: on an erasure request your name, phone, address and browser identifiers are removed from our records within 30 days; the order amounts stay for the merchant's accounting, anonymised.
Security
All traffic is encrypted (TLS). Merchant secrets are encrypted at rest. Money amounts are always priced by Shopify, never taken from the browser. Access is limited to the merchant's own store through Shopify's session authentication.
Changes
We will update this page when the app's data practices change and note the date above.
Questions: support@codplus.app