Appco COD

Privacy Policy

Last updated: October 14, 2026

Appco COD (“the App”) is a Shopify app operated by Appco Software(“we”, “us”). The App lets Shopify merchants control when Cash on Delivery (COD) is shown at checkout. This policy explains what information the App collects when a merchant installs it, how we use that information, and the choices merchants and their customers have.

Information we collect

When you install the App, we access and store the following through the Shopify API:

• Store information: your shop’s myshopify domain, the permissions you granted, and the access token Shopify issues to the App.
• App settings: whether COD control is on, the COD rules you configure (for example order total limits, collections, provinces, postal codes and customer tags), your selected plan and sync status.
• Order details: for each new or cancelled order we store the Shopify order ID, order number, currency, order total, whether the order used COD, and the order and cancellation dates. We use these to count COD orders against your plan limit and to show COD analytics in the App.

The App does not store your customers’ names, email addresses, phone numbers, shipping or billing addresses, or payment details. When checkout runs, Shopify evaluates your COD rules inside its own checkout; the App does not receive or store that checkout information.

How we use information

• To provide the App’s features: apply your COD rules at checkout, sync settings, and show usage and analytics.
• To enforce plan limits and features based on the plan you choose.
• To provide support when you contact us, and to keep the App secure and working correctly.

We do not sell merchant or customer data, and we do not use it for advertising.

Sharing

We share information only with service providers we need to run the App:

• Shopify, the platform the App runs on, including billing for paid plans.
• Hostinger, which hosts the App’s servers.
• Supabase, which hosts the App’s database.

We may also disclose information if required by law or to protect our rights, or as part of a merger or sale of our business, in which case this policy will continue to apply.

Data storage and security

Data is sent over encrypted HTTPS connections. Requests from Shopify are verified using Shopify’s signatures before they are processed. Access to the App’s systems is limited to the people who need it to operate the App. Our providers may store data on servers outside your country.

Data retention and deletion

• When you uninstall the App, we delete its access tokens and turn off your COD settings.
• About 48 hours after uninstall, Shopify sends us a data erasure request and we permanently delete all data stored for your shop, including settings, rules and order records.
• We respond to Shopify’s customer data requests and customer erasure requests. Because we do not store customer personal information, there is normally no customer data to return or delete.

Your rights

Depending on where you are located, you may have the right to access, correct, or delete your personal information, or to object to its processing. Merchants can exercise these rights by contacting us. Customers of a store should contact that store directly; we will help the merchant respond.

Changes to this policy

We may update this policy from time to time. The “Last updated” date above shows when it was last changed.

Contact us

For questions about this policy or your data, email support@appcosoftware.com.