Your data and privacy matter.

1. Overview

MZ: COD Sales Booster Forms ("the App", "we", "our", or "us") provides cash-on-delivery form, order-management, verification, storefront customization, shipping, discount, and related functionality to merchants using the Shopify platform.

This Privacy Policy describes the information that may be processed through the App, why it is processed, how it is protected, and the choices available to merchants and customers.

2. Information we process

The App processes only information reasonably necessary to provide its features and operate the service.

Merchant and store information

• Store domain and store identifier
• App installation and authorization information
• App configuration and form settings
• Selected language, theme, country, shipping, and verification settings
• Subscription or plan status

Customer information

Technical information

The App may process technical information necessary for authentication, security, app proxy requests, session management, troubleshooting, and protection against duplicate or invalid order submissions.

3. How information is used

Information may be processed for purposes including:

• Operating and maintaining the App.
• Displaying merchant-configured COD forms on storefronts.
• Processing customer-submitted COD form information.
• Creating and associating customer and order information where required by the App's functionality.
• Calculating shipping, discounts, subtotal, and final order amounts.
• Providing order verification, duplicate protection, and fraud reduction functionality.
• Displaying COD submissions and status information inside the merchant dashboard.
• Enforcing applicable monthly order limits associated with the merchant's plan.
• Maintaining service security, preventing misuse, and diagnosing technical problems.
• Complying with applicable legal, privacy, and platform obligations.

We do not use customer information processed through the App for unrelated advertising purposes.

We do not sell personal information.

4. Customer information submitted through storefront forms

When a customer uses a COD form configured by a merchant, the information entered into that form may be transmitted to the App so the requested order-related functionality can be performed.

Depending on the merchant's form configuration, submitted information may include:

• Full name
• Phone number
• Email address
• Shipping address
• City, province, or postal code
• Delivery instructions
• Custom form-field responses
• Product and variant information
• Quantity
• Selected shipping method
• Discount information
• Order verification status

Merchants should ensure that their storefront privacy policy accurately describes their use of the App and their processing of customer information.

5. How information may be shared

Information is shared only when reasonably necessary to provide, secure, maintain, or legally operate the App.

Information may be processed by:

• Shopify, as the commerce platform used by the merchant.
• Hosting and infrastructure providers used to operate the App's backend services and database.
• Service providers necessary for security, monitoring, or technical operation.
• Government authorities or other parties where disclosure is required by applicable law or a valid legal process.

Service providers are expected to process information only for the purposes necessary to provide their services.

6. Data storage and retention

Information may be retained for as long as necessary to provide the App's functionality, comply with merchant instructions, resolve disputes, enforce agreements, meet legal requirements, and maintain appropriate business and security records.

When a merchant uninstalls the App, certain information may remain temporarily where necessary to meet legal, security, backup, or privacy obligations.

Data associated with a store may be deleted or anonymized following applicable deletion requirements and platform privacy webhooks.

7. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information against unauthorized access, disclosure, modification, loss, or misuse.

Security measures may include:

• HTTPS/TLS encryption for data in transit.
• Authenticated requests between the App and Shopify.
• Verification of webhook signatures.
• Restricted access to production systems and credentials.
• Environment-based storage of private application credentials.
• Validation of storefront app proxy requests.
• Monitoring and technical safeguards intended to reduce unauthorized activity.

No electronic storage or transmission method can be guaranteed to be completely secure.

8. Privacy rights

Depending on applicable law and jurisdiction, individuals may have rights relating to their personal information, including the right to:

• Request access to personal information.
• Request correction of inaccurate information.
• Request deletion of certain personal information.
• Object to or restrict certain processing.
• Request information about how personal data is processed.

Customers should normally contact the merchant from whom they made a purchase first, because the merchant controls the customer relationship.

Merchants may contact us where assistance is required to fulfill an applicable privacy request involving information processed by the App.

9. Data access, deletion and compliance requests

The App supports applicable privacy and compliance processes relating to customer data requests, customer deletion requests, and store deletion requests.

We process applicable platform privacy webhooks, including:

• Customer data access requests
• Customer data redaction requests
• Store data redaction requests

Where a valid deletion request is received, relevant information is deleted or otherwise handled in accordance with applicable legal and platform requirements.

10. Children's privacy

The App is designed for merchants operating online stores and is not directed specifically toward children.

We do not knowingly use the App to collect personal information from children for independent marketing purposes.

11. International processing

Information may be processed or stored in countries other than the country where a merchant or customer is located, depending on the infrastructure and service providers used to operate the App.

Where required, reasonable safeguards are used for cross-border processing in accordance with applicable data protection requirements.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to the App, legal requirements, platform requirements, service providers, or data-processing practices.

The latest version will be published on this page with an updated "Last updated" date.

13. Contact us

For privacy questions, data requests, deletion requests, or concerns about this policy, contact the App developer.