Privacy Policy

1. Our role and the merchant's role

The App helps Shopify merchants offer cash-on-delivery (COD) forms, manage COD orders, provide upsells and discounts, and configure optional recovery and analytics integrations. Merchants determine how they use customer information in their stores. We process customer information on their behalf to provide these services. We separately handle merchant contact information and service records to operate and support the App.

This policy covers our App, not a merchant's entire store. Customers should also read the store's privacy policy and contact the merchant about purchases, delivery, returns, and the merchant's marketing choices.

2. Information we collect

• From Shopify: store identifiers and domain, installation and authorization information, store language and currency settings, product and variant information, inventory availability, delivery options, and COD order and fulfillment information needed by the App. Order information can include the customer's name, email, phone number, shipping address, items, quantities, prices, discounts, currency, delivery charges, and order status.
• From merchants: form content and translations, styling and offer rules, order-management settings, support correspondence, and credentials or identifiers for integrations the merchant chooses to configure, such as SMTP, pixels, and Google Maps.
• From customers: information entered and submitted through COD forms, including contact and delivery details, selected products, and order notes or custom fields configured by the merchant. Optional abandoned-form recovery records include email, selected items, language, consent status, activity times, and a recovery identifier.
• Technical information: IP address, browser and device information, request and error logs, timestamps, referring pages, advertising click identifiers, and events associated with form, offer, and order interactions. The information involved depends on the feature used and the merchant's configuration.

The App's COD form does not request payment-card numbers or card security codes. Merchants and customers should not enter sensitive information unrelated to a delivery order in custom fields, notes, or support messages.

3. How information is used

• Authenticate installations, load store settings and products, and display localized forms and offers.
• Calculate COD quotes and delivery options, create pending-payment orders in Shopify, and synchronize inventory and fulfillment information.
• Provide order management, reporting, customer support, duplicate-order prevention, abuse checks, and troubleshooting.
• Send abandoned-form reminders through the merchant's email service when recovery is enabled and the required consent has been recorded.
• Provide address suggestions and measure store events through optional integrations selected by the merchant.

We do not sell customer information or use Shopify customer information to build our own advertising audiences. Merchants remain responsible for the legal basis, notices, and consent required for their store's processing. Where applicable, our own service administration relies on providing the service, legitimate operational and security interests, and legal obligations; optional marketing or tracking may require consent.

4. Service providers and optional integrations

Information is disclosed as necessary to Shopify, the merchant using the App, and infrastructure providers that operate the service, including Amazon Web Services hosting. Authorized operational personnel may access information when needed for support or service administration. Customer-data management is restricted to senior administrators. We may also disclose information when required by law or to protect legal rights and service security.

• Merchant-configured SMTP: the selected mail provider receives recipient email addresses and reminder content, which may include items and recovery links. Providers vary by merchant. Email credentials are used to send messages through that configured service.
• Meta/Facebook and TikTok: when configured, these services may receive event names, times, page URLs, item and order values, currency, click or cookie identifiers, IP addresses, browser information, and customer matching data such as hashed email or phone numbers. Hashing does not make matching data anonymous.
• Google Maps: when address autocomplete is enabled, Google processes address-search input and browser connection information to return suggestions.

Merchants control which optional integrations are enabled and must configure them consistently with their notices and applicable consent requirements. These providers also process information under their own policies: Shopify, AWS, Meta, TikTok, and Google.

5. Cookies, browser storage, and choices

The App uses browser storage and identifiers for settings, form behavior, and recovery flows. Enabled pixel integrations may read or set advertising identifiers to associate events with visits or campaigns. You can manage cookies through your browser and the store's privacy controls. Disabling storage may affect some features.

This privacy-policy page contains no advertising pixels or third-party analytics scripts. Our web server may still record ordinary access information such as an IP address and request time.

6. Retention and deletion

Store settings and COD order records are stored to support the installed service and merchant operations. Recovery links normally expire seven days after the last recorded draft activity; expiry of a link is not deletion of the stored draft. Unsubscribe records are retained to prevent further reminders to an opted-out address.

The current service does not apply a single automatic deletion schedule to all orders, drafts, operational logs, or backups. Uninstalling the App does not by itself confirm that every stored copy has been erased. Merchants can request an account-data retention review or deletion through the contact below. We assess the request, the merchant's instructions, applicable legal obligations, and any necessary security or dispute records, and explain any retention limitations when responding. Backup copies, where present, require separate consideration.

Records in Shopify or a merchant's separately configured provider are controlled by that service or merchant; deleting information from the App does not necessarily delete those independent records.

7. Location and security

Our operator is based in Hong Kong. Service infrastructure and optional providers may process information in other countries, including the United States. Your information may therefore be processed outside your country, including outside the European Economic Area or United Kingdom. Contact us for information about a particular processing location or an applicable transfer arrangement.

The service uses HTTPS for network connections and application authentication for merchant operations. Access is limited according to operational responsibilities. No network or storage system can be guaranteed completely secure. This policy does not represent a certification of security or a claim that every record is encrypted at rest.

8. Your rights and requests

Depending on your location, you may have rights to access, correct, delete, or receive a copy of personal information, restrict or object to processing, withdraw consent, and complain to your local privacy regulator. Customers should first contact the store that collected their information. You may also contact us so we can coordinate with the relevant merchant.

Email support@codnina.com with the subject "Privacy request" and identify the store and your request. We may ask for proportionate information to verify your identity or authority. Do not send passwords, payment-card details, or government identity documents unless separately necessary and requested through an appropriate channel. We respond in accordance with applicable law and explain any applicable exceptions.

To stop COD recovery reminders, use the unsubscribe link in a reminder or contact the merchant or us. Withdrawing consent does not affect processing already lawfully carried out. Merchants can disable optional integrations in their settings and uninstall the App to stop its ongoing authorized access.

9. Changes and contact

We may update this policy as the service or its data practices change. The date above identifies the current version. Where required, we provide additional notice of material changes.