CODcheck

Privacy Policy

Version 1.0 · Effective August 2026

This Privacy Policy explains how CODcheck ("CODcheck", "we", "us") handles personal data in connection with the CODcheck Shopify application (the "App") and the marketing website at codcheck.ro (the "Site"). CODcheck helps Shopify merchants reduce cash-on-delivery (COD) fraud by scoring orders for refusal/fraud risk.

1. Our role: controller vs. processor

The App (merchant customer data). For personal data about a merchant's shoppers processed through the App, the merchant is the data controller and CODcheck acts as a data processor on the merchant's documented instructions. That relationship is governed by our Data Processing Agreement.
The Site and merchant account. For data about the merchant themselves and visitors to the Site, CODcheck is the data controller.

2. What data we process

Marketing site	With your consent, anonymised analytics (Google Analytics) — pages viewed, approximate region, device/browser type. Essential cookies keep the site working. We do not run analytics until you accept them; see cookie preferences on the Site.
Merchant account	Your `.myshopify.com` domain, shop currency and locale, the offline access token issued by Shopify (stored encrypted), and your plan / billing status. Billing itself is handled by Shopify — we never receive or store card details.
Shopper data (via the App)	Order identifiers and order value; and — only where the merchant enables it — a shopper's name, phone, email and shipping address. Identity fields are never stored in clear text: they are converted to irreversible cryptographic fingerprints (keyed HMAC-SHA-256 with a secret server-side pepper) used only to match risk signals. Contact details shown inside the App are fetched live from Shopify on each view and are not retained by CODcheck.

3. Why we process it, and our legal bases (GDPR)

Fraud prevention — scoring COD orders and operating the shared anti-fraud network. Legal basis: legitimate interests (Art. 6(1)(f)) of merchants in preventing delivery-refusal fraud, balanced against data subjects' rights by using irreversible hashes rather than readable personal data.
Providing and securing the service — authentication, the merchant account, support. Legal basis: performance of a contract (Art. 6(1)(b)).
Site analytics — understanding how the Site is used. Legal basis: consent (Art. 6(1)(a)), which you can withdraw at any time.

4. The shared anti-fraud network

When a merchant opts in, CODcheck contributes anonymised failure signals (for example, a refused delivery) to a network shared across stores, so other merchants are protected from the same fraudulent buyers. Only irreversible hashes are shared — never names, phone numbers, emails or addresses. A merchant can leave the network at any time from the App's settings.

5. Who we share data with

Shopify	The platform the App runs on; the source of order and shop data, and the billing provider.
Amazon Web Services	Hosting and database, in the EU region (Frankfurt, `eu-central-1`).
Google Analytics	Site analytics, only with your consent.

We do not sell personal data, and we do not use it for advertising.

6. Where data is stored

Data is stored within the European Union (AWS eu-central-1, Frankfurt). Where any processor transfers data outside the EEA, it is done under appropriate safeguards such as the European Commission's Standard Contractual Clauses.

7. How long we keep it

Identity hashes and order-risk records are kept while the merchant's store is active, so customer risk history remains useful, and are deleted when the App is uninstalled or on a valid deletion request.
Live shopper contact details are never stored — they are fetched from Shopify on demand.
The encrypted access token is deleted when the App is uninstalled.

8. Security

All traffic is encrypted in transit with TLS (HTTPS).
Access tokens are encrypted at rest (AES-256-GCM) with a key independent of the application key.
Shopper identity is stored only as irreversible HMAC-SHA-256 fingerprints salted with a secret pepper, so the underlying personal data cannot be recovered from our records.

9. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict and port your personal data, and to object to processing. Because a shopper's data is controlled by the merchant, a shopper should direct requests to the merchant (the controller); CODcheck will assist the merchant in responding. CODcheck honours Shopify's mandatory privacy webhooks — customers/data_request, customers/redact and shop/redact — to surface or delete data on request. To exercise rights against CODcheck as a controller, or to raise a concern, contact us at hello@codcheck.ro. You may also lodge a complaint with your local data protection authority.

10. Cookies

The Site uses essential cookies to function and, only with your consent, Google Analytics cookies. You can accept, decline or change your choice at any time via the cookie-preferences control on the Site. The embedded App uses Shopify session tokens rather than cookies, so it works even when third-party cookies are blocked.

11. Children

The App and Site are intended for businesses and are not directed at children.

12. Changes to this policy

We may update this policy as the Service evolves. Material changes will be reflected by a new version number and effective date at the top of this page.

13. Contact

CODcheck — hello@codcheck.ro.

This Privacy Policy is provided for transparency and describes CODcheck's data practices as implemented. It is not legal advice; you should have your registered legal entity name, address and any Data Protection Officer details added, and review it with your own counsel, before publishing it as your binding policy.