Privacy Policy

We collect only the data required to provide COD order verification services:

• Shop data — Your Shopify store name and domain, used to identify your account.
• Order data — COD order ID, order name, total price, and status, used to track verification outcomes.
• Customer phone numbers — Collected from COD orders to send WhatsApp verification messages.
• Customer names — Collected from order shipping address for message personalization.
• App settings — Your WhatsApp API credentials (Meta Access Token, Phone Number ID) and configuration preferences you enter in the app.

We do not collect payment details, passwords, or any data beyond what is listed above.

• To send WhatsApp verification messages to your customers via the Meta Cloud API.
• To track order verification status (pending, verified, cancelled) in your dashboard.
• To enforce plan message limits and display usage analytics.
• To auto-cancel orders that are not verified within the configured timeout period.
• To maintain a blacklist of phone numbers you choose to block.

We do not sell, rent, or share your data or your customers' data with any third party for marketing purposes.

The app integrates with the following third-party services:

• Shopify — We access your store data via the Shopify API under your authorization. Shopify's own privacy policy governs their data practices.
• Meta (WhatsApp Cloud API) — Customer phone numbers and message content are transmitted to Meta's servers to deliver verification messages. Meta's privacy policy applies to data processed through their API. Your Meta API credentials are stored on our server and used solely for message delivery.

All data is stored on secure servers operated by MatrixInn Solutions. We use industry-standard measures to protect data against unauthorized access, including encrypted connections (HTTPS) and access controls.

Your WhatsApp API credentials are kept on our server and are only used there to send messages.

Our server keeps short technical logs (for example which webhook arrived for which store and order) to operate and troubleshoot the app. Customer phone numbers are masked in these logs (only the last 4 digits are kept), and logs are kept only as long as needed to troubleshoot the app.

• Active merchants — Data is retained for as long as the app is installed on your store.
• On uninstall — All store settings, order records, and blacklist data are deleted immediately when you uninstall the app.
• Customer data requests — We support Shopify's mandatory GDPR webhooks. When a customer erasure request arrives, we immediately delete that customer's COD order records and any blacklist entry for their phone number. When a store's data erasure request arrives (48 hours after uninstall), everything left for that store is deleted.

As a merchant using our app, you have the right to:

• Request a copy of the data we hold about your store.
• Request deletion of your data at any time by uninstalling the app or contacting us.
• Opt out of any non-essential data use by contacting us directly.

Your customers may exercise their data rights through Shopify's built-in privacy request tools, which we fully support via our compliance webhooks.

We may update this Privacy Policy from time to time. Material changes will be communicated via the app or email. Continued use of the app after changes constitutes acceptance of the updated policy.