Privacy Policy

Last updated: March 21, 2026

Faster COD Forms ("we", "our", or "the app") is a Shopify application that helps merchants accept cash-on-delivery orders through a customizable order form. This Privacy Policy explains how we collect, use, and protect data when you install and use our app.

1. Data We Collect

When merchants install and use Faster COD Forms, we may collect the following data:

• Store information: Shop domain, store name, email address, and Shopify plan — provided by Shopify during app installation.
• Order data: Customer name, email, phone number, shipping address, and order details submitted through the COD form.
• Form interaction data: Form opens, submissions, abandoned orders, and UTM parameters for analytics purposes.
• OTP verification data: Phone numbers used for one-time password verification. OTP codes are temporary and expire automatically.
• Support requests: Email address and message content when merchants contact us through the in-app support form.

2. How We Use Data

We use the collected data to:

• Process and create COD orders on behalf of the merchant's store.
• Perform fraud checks such as duplicate order detection, IP validation, and OTP verification.
• Display analytics and reports within the app dashboard.
• Send order confirmation and shipping notifications via SMS or WhatsApp when configured by the merchant.
• Sync order data to third-party integrations (Google Sheets, Klaviyo, Omnisend, Facebook CAPI, TikTok Events API) when enabled by the merchant.
• Respond to support requests.

3. Data Storage

App settings and order metadata are stored in a secure database associated with the merchant's Shopify store. We do not store payment card information. All order data is created through Shopify's official API and stored within the merchant's Shopify admin.

4. Third-Party Services

When merchants enable integrations, data may be shared with the following third-party services:

• Google Sheets (order export)
• Facebook / Meta (Conversions API events)
• TikTok (Events API)
• Klaviyo and Omnisend (customer and order events)
• Twilio or MSG91 (SMS/WhatsApp notifications, when configured)
• IP geolocation services (address validation)

These integrations are optional and only active when the merchant explicitly configures them. Each third-party service has its own privacy policy.

5. Data Retention and Deletion

We retain app settings and order metadata for as long as the app is installed. When a merchant uninstalls the app, we receive a shop/redact webhook from Shopify and delete all stored data associated with that store within 48 hours.

When we receive a customer data deletion request (customers/redact) from Shopify, we remove or anonymize all personally identifiable information associated with that customer.

6. Customer Data Requests

When we receive a customer data request (customers/data_request) from Shopify, we compile and provide all stored data associated with the requested customer, including order records, OTP records, and support requests.

7. Security

We use industry-standard security practices including HMAC webhook verification, authenticated API calls via Shopify's official session tokens, and encrypted connections (HTTPS) for all data transmission.

8. Cookies

The app uses browser localStorage to temporarily store cart data during the order form session. This data is cleared after the order is placed or the session expires. We do not use tracking cookies.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the app after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or your data, please contact us through the in-app support form or email us at itoozesolution@gmail.com.