Privacy policy

Who we are

The app is built and run by Plug Software, the trading name of Taukir Reza, an individual developer based in India. In this policy, “we” means Plug Software, “you” means the merchant who installed the app, and “customers” means the shoppers of your store.

For your customers' data, you are the controller and we process it on your behalf, only to provide the app to you.

What the app does

It shows or hides Cash on Delivery at checkout by the rules you set — products, collections, vendors, countries, postal codes, order totals, customer tags and similar. It can add a COD fee as a shipping rate that appears only with COD, take part of the order as an online deposit with the rest paid on delivery (Partial COD), and show a COD badge on product pages.

What we store about you, the merchant

• Your shop's address (for example your-store.myshopify.com) and the access token Shopify issues when you install the app, so the app can act on your behalf.
• Your settings: COD fee settings are kept on our servers. Your COD rules and Partial COD settings are saved in your own Shopify store, as app settings that Shopify's checkout reads.
• Account state: your plan and billing cycle, as reported by Shopify's billing, how many COD orders you've had this cycle, and which notices and setup steps you've seen or dismissed.
• Your name, email address, time zone, currency and app language, from Shopify, to email you about your account — a welcome when you install, and a heads-up when you're near or past your plan's order limit — and occasional product news, which you can turn off in any of those emails or on the app's Preferences page. We keep a record of which product emails were sent to which address.

What we store about orders and customers

• For each new order: its Shopify order id and number, total and currency, the payment method names, whether it used COD or Partial COD, the deposit and balance amounts for Partial COD, and any charge for orders over your plan's limit.
• Nothing that identifies a customer: we do not store customers' names, email addresses, phone numbers, addresses, or the items they bought.
• Rules you write: if a rule uses customer tags, email addresses or phone numbers, you type them into the app and they are saved in your Shopify store with your other COD rules, not on our servers. Shopify's checkout uses them only to decide whether to show COD.

The Shopify permissions we ask for

• Payment customizations (read and write) — to show or hide Cash on Delivery at checkout.
• Delivery customizations (read and write) — to hide the delivery option that belongs to COD when COD is hidden.
• Shipping (write) — to create the shipping rate that carries your COD fee.
• Orders (write) and order edits (write) — to count your COD orders and, for Partial COD, add the balance due to the order.
• Cart transforms (write) — to charge only the deposit at checkout for Partial COD.
• Merchant-managed fulfillment orders (write) — to mark the Partial COD balance line as fulfilled once the goods ship.
• Products (read) — so you can pick the products, collections and vendors a rule applies to. The app never changes your products.
• Customers (read) — required by Shopify for order data that includes the buyer. We don't store customer details.
• Translations (read) — to read the names of your payment and shipping methods in each of your store's languages.

We ask for nothing else. If a future feature needs another permission, Shopify will ask you to approve it before it takes effect.

On your storefront

The COD badge checks the shopper's country through Shopify's own storefront, so a badge with a country rule shows only where COD is offered. If the shopper has allowed it through Shopify's cookie banner, the country code is kept in their browser for that visit only; otherwise nothing is stored. When a shopper chooses Partial COD, that choice is saved on their Shopify cart. We use no tracking or advertising cookies.

How we use the data

Only to run the app for you: to apply your COD rules and fees, take Partial COD deposits, count COD orders against your plan and bill extra orders through Shopify, and email you about your account. We do not use it for advertising or profiling, and we never combine one store's data with another's.

Who else sees it

We do not sell, rent or share your data or your customers' data. The only third parties involved act on our instructions: Shopify itself; the hosting provider that runs our server in India, where the database also lives; the email services that deliver our emails to you (Google's mail service and Resend); and Tawk.to, the live chat inside the app, which receives your name and email only when you open the chat.

How long we keep it, and how to have it erased

• While the app is installed, we keep your settings and order records so your plan usage and order history are there when you need them.
• When you uninstall, the access token and your plan details are deleted straight away. Shopify then asks us to erase the shop 48 hours later, and at that point everything we hold for your store — settings, order records, your contact details and email history — is deleted for good. COD rules saved in your Shopify store are removed by Shopify with the app.
• We don't hold personal data about your customers, so when a customer asks Shopify to erase theirs, there is nothing of theirs on our servers to delete.
• You can ask us to erase everything sooner, at any time, by emailing help.zainabfatima@gmail.com.

Security

All traffic runs over HTTPS. Every request from Shopify — webhooks and the admin — is signed by Shopify and verified before it is acted on. Access tokens are stored on the server only.

Your rights and your customers' rights

Depending on where you or your customers are, you may have the right to see, correct, export or erase personal data, or to object to how it is used. Customers should contact your store, and you can forward their request to us; we will act on it within 30 days at the latest.

Changes to this policy

If we change how the app handles data, we will update this page and the date at the top. Meaningful changes are also announced in the app.

Contact

Questions, requests or concerns: help.zainabfatima@gmail.com.