Privacy Policy
The short version. ItsCOD COD Form & Page Builder helps you build landing pages, COD forms and offers for your Shopify store. What you build is saved in your own store. We don't sell or share data, we don't use it for advertising, and we don't keep a copy of your customers' personal details.
1. Who we are
ItsCOD COD Form & Page Builder ("the app") is a Shopify app made by ItsCOD. It helps merchants build landing pages, cash on delivery order forms, bundles and upsells, and show them in their Shopify store. When you install the app, you are the data controller for your store's data and your customers' personal data. We act as a data processor that runs the app on your behalf.
2. What we don't do
- We don't sell your data or your customers' data.
- We don't share data with advertisers, data brokers or anyone else for marketing.
- We don't profile customers across stores. Each store's data stays with that store.
- We don't use your data to train AI or machine-learning models.
- We only ask for the Shopify permissions the app needs to work.
3. Customer data
Your customers place their orders through your own Shopify checkout, so their details go to your store like any other order. The app doesn't create orders and doesn't keep a copy of your customers' names, addresses, emails or phone numbers.
To show you how your pages and offers perform, the app counts what visitors do on them and reads the orders placed from them, without keeping anyone's personal details. Nothing is counted when a visitor declines tracking in your store's cookie banner.
If you turn on access restrictions (blocked countries, blocked visitors or a limit on repeat orders), the app checks each visitor against your rules. It keeps only what it needs to apply them, for a short time, and never in a form that identifies a person.
The app answers Shopify's privacy requests for your customers and your store.
4. Storage and retention
Everything you build in the app (pages, forms, offers and settings) is saved in your own Shopify store. Our own database holds only what the app needs to run: your Shopify session, your store's basic details, your plan and usage, and your Analytics. Short-lived data, used for example to stop abuse, expires on its own.
When you uninstall the app, your session and connections are deleted right away. The rest of your store's data is deleted when Shopify asks us to, 48 hours later. We keep only your store's domain, plan and order count, so the free plan can't be reset by reinstalling.
5. Integrations you set up
Some features only work when you connect your own accounts: ad pixels (Meta, TikTok, Snapchat, Google and Taboola), Google Sheets and WhatsApp buttons. Pixels send data from the visitor's browser straight to those platforms, under your accounts and their terms, and only when the visitor allows tracking. You are responsible for mentioning these services in your store's privacy policy.
6. Google user data
When you connect Google Sheets, the app can only see and edit the spreadsheets it creates for you, and uses this access only to write your orders to them.
Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We don't transfer Google user data to third parties, use it for advertising, use it to train AI or machine-learning models, or let people read it.
You can disconnect at any time in the app or in your Google Account. We then delete our access.
7. Subprocessors
The app relies on Shopify (the platform your store, pages and checkout run on), our hosting provider (the app's servers), and Google (Google Sheets if you connect it, and the emails we send you about your plan). No other third party processes your data.
8. Security
- You sign in through Shopify, and through Google for Google Sheets. We never see your passwords.
- All traffic to the app is encrypted.
- Requests from Shopify are verified before anything happens.
- Each store's data is kept apart from every other store's.
9. Children
The app is not directed at children under 13 (or 16 in the EU) and should not be used to knowingly collect personal data from minors. If your customers may be minors, you are responsible for getting the consents your law requires.
10. Changes to this policy
We may update this policy. When we do, the "Last updated" date at the top changes. Using the app after a change means you accept the updated policy.
11. Contact
Questions about this policy or how the app handles your data? Email support@itscod.com. Our Terms of Service apply too.