Privacy Policy
Last updated: August 11, 2026
This policy explains how COD Master processes Shopify merchant and buyer data when the app is installed and used.
1. Roles of the parties
The Shopify merchant determines why buyer data is collected through the COD form and acts as controller of that data. COD Master acts as the application provider and processes data on the merchant's behalf for the features the merchant enables.
2. Data we may process
Store and installation data: shop domain, Shopify identifiers, app plan and saved configuration. Operational data: form opens, completion progress, order placement, upsell usage, errors and technical events. Buyer data entered in the form: name, phone number, address, city, region, email, postal code and order note. Order data: products, quantities, optional extras, shipping cost and order value.
3. Purposes of processing
We use data only to provide merchant-requested features: order creation, duplicate prevention, abandoned-form recovery, upsells, performance measurement, advertising event delivery and technical support.
4. Data minimization and separation
We collect only the data needed for enabled features. Each store's data is logically isolated. Individual buyer data is not used for competitive rankings or displayed by default in internal aggregate analytics.
5. Service providers and transfers
We may use infrastructure, database, monitoring and email providers solely to operate the service. They are contractually required to protect data and act only on our instructions. An up-to-date subprocessor list is available on request.
6. Retention and deletion
Data is retained only for as long as required to provide the service or meet legal obligations. We process Shopify access and deletion requests. Following uninstall, store data is deleted according to Shopify requirements, except where retention is legally required.
7. Security
We use HTTPS, access controls, per-store data separation, logging of sensitive actions and technical and organizational safeguards appropriate to the risk. Staff access is restricted to support and service operation needs.
8. Rights and requests
Merchants may request access, correction, export or deletion of their data. Buyers should first contact the store they purchased from; we assist the merchant and Shopify in responding to valid requests.
9. Contact
For privacy questions or data requests, contact privacy@codmaster.app. The app provider is the developer identified in the COD Master Shopify App Store listing and Shopify billing records.