Privacy

Privacy policy

This policy explains the information Codllect processes to provide the Shopify app and support merchants.

Effective and last updated: August 29, 2026

Information we process

Codllect processes merchant contact details, app configuration, device and activity information, relevant products and collections, supported order history, order edits, payment customizations, and translations. When a merchant configures Limit COD, the app also processes customer tags, email address, phone number, and shipping country, province or state, and postal code to evaluate COD availability.

Why we process it

We use this information to authenticate the app, connect the COD method, configure the fee, enforce merchant-configured COD eligibility rules, finalize qualifying orders, show merchant analytics, support localized setup, and respond to support requests.

Storage and retention

Customer values evaluated against Limit COD rules at checkout are processed in Shopify’s payment-customization runtime and are not copied into Codllect’s application database. Merchant-created rule settings, including any email or phone entries a merchant supplies, are stored as app configuration on Shopify. Configuration and operational records are retained while the app is installed and as needed for security, billing, support, and legal obligations. Eligible deletion requests are handled through Shopify privacy workflows or the contact below.

Service providers

Codllect uses infrastructure, database, email, monitoring, and Shopify platform providers only as needed to operate and support the app. Providers are limited by their service terms and applicable data-protection obligations.

Security

We use access controls, encrypted transport, limited data access, and operational safeguards designed to protect merchant information. No online system can guarantee absolute security.

Your choices and rights

Merchants may request access, correction, or deletion where applicable by contacting [email protected]. We may need to verify the requester and retain information required by law.

[email protected]