NativeCOD
Contact usGet early access
FeaturesHow it worksPricingFAQContact us
Legal

Privacy policy

Last updated: 28 October 2026

NativeCOD ("the app") adds a Cash on Delivery order form to Shopify stores. This policy explains what information the app collects, why, and how it is handled.

Information we collect

  • From merchants: store name, domain, contact email, country, currency and the app settings the merchant configures. We use Shopify's authentication; we never see your Shopify password.
  • From shoppers who use the form: the details they type to place an order: name, phone number, email (optional), delivery address and order note, plus the items ordered. With the merchant's setting turned on, also the campaign parameters in the page URL (UTM, ad click IDs) and the shopper's IP address.
  • Abandoned forms: if a shopper types a phone number but does not submit, the details entered so far are saved for the merchant (this can be turned off).

How we use it

Order details are sent to the merchant's Shopify store to create the order, which is the purpose of the app. We keep a copy of basic order data (order number, totals, name, phone, city, email) to show the merchant's COD order list, enforce the merchant's fraud rules (for example, orders per phone per day) and count monthly usage for billing. Phone numbers and IP addresses used for limits are stored as one-way hashes. We don't use shopper data for any other purpose, and we make no automated decisions about shoppers beyond the order limits the merchant sets.

Ad pixels and consent

If the merchant connects ad pixels (Meta, TikTok, Snapchat, Google, Pinterest), the shopper's browser sends conversion events (order value and products) directly to those platforms. The form follows the visitor's choices in the store's cookie banner through Shopify's Customer Privacy API: ad events are sent only when marketing and the sale or sharing of data are allowed, and analytics events only when analytics is allowed.

Sharing

We do not sell personal information. Data is shared only with the merchant's Shopify store and our hosting provider, which runs the server on our behalf.

Retention and deletion

  • Abandoned forms are deleted after 90 days.
  • Names, phone numbers, emails, cities and campaign data in our copy of COD orders are removed after 90 days. Order numbers and totals stay for statistics; the order itself remains in the merchant's Shopify store.
  • Phone and IP hashes used for order limits are removed after 30 days.
  • Customer data is removed when Shopify sends a redaction request, and all of a store's data is deleted 48 hours after the merchant uninstalls the app. Merchants can ask for deletion at any time.

Security

Shoppers' personal data is encrypted in our database with AES-256-GCM, and all connections use HTTPS (TLS). The database is not reachable from the internet, test data is kept apart from production data, and access is limited to the people who operate the app. Owner sign-ins are logged and rate-limited.

Your rights

Shoppers should contact the store they ordered from to access, correct or delete their data; the store can forward the request to us. You can also contact us at support@matsites.com.