COD Profit Analytics ("the App", "we", "us") is a Shopify app that helps merchants calculate true profit on cash-on-delivery (COD) orders — accounting for returns (RTO), delivery costs, cash handling fees, taxes, and ad spend. This policy explains what information the App collects when a merchant installs it, why, and how it's handled.
This policy covers the App only. Shopify's own handling of your store's data is governed separately by Shopify's Privacy Policy.
Information we collect
When a store owner installs the App, we access and store:
- Order data — order totals, line items (product, variant, quantity, price), fulfillment/financial status, tags, and cancellation reason. This is used to calculate per-order and aggregate profit and to detect returned (RTO) orders.
- Product data — product and variant titles and IDs, used to let the merchant set per-product cost overrides (COGS).
- Store owner/staff account info — the name and email of the Shopify user who installs or accesses the App, provided by Shopify during login. This is standard session information required to operate any embedded Shopify app securely.
- Cost and settings data you enter directly — figures like delivery fees, COD cash-handling percentages, tax rates, and packaging costs, which the merchant configures in the App to make profit calculations accurate for their business.
- Ad platform credentials, only if you connect them — if a merchant chooses to connect a Meta, Google Ads, TikTok, or Snapchat ad account, we store the account ID and access credentials needed to fetch that account's ad spend figures. This is entirely opt-in per platform and is used solely to pull spend data into the App's reports.
Information we do not collect
The App deliberately does not store your customers' names, email addresses, phone numbers, shipping/billing addresses, or payment details — including no geographic detail such as shipping city or country. We do not track your storefront's visitors, and we do not access or store payment card data at any point.
How we use this information
Order, product, and cost data are used exclusively to power the App's own features for the installing merchant: profit dashboards, cost breakdowns, return-rate analysis, product performance reports, and (where an ad account is connected) blended return-on-ad-spend calculations. We do not use your store's data to train any AI/ML model, and we do not use it for any purpose unrelated to operating the App.
Sharing with third parties
We do not sell, rent, or share your store's data with any third party for their own marketing or advertising purposes. The only outbound data flow is one the merchant explicitly sets up: when an ad platform (Meta, Google Ads, TikTok, or Snapchat) is connected, the App calls that platform's own API, using the merchant's own credentials, purely to read that merchant's ad spend — no store or order data is sent to those platforms.
Our infrastructure providers (a hosting provider and a managed database provider) process data on our behalf strictly to run the App, under standard hosting agreements, and do not use it for any purpose of their own.
Data retention & deletion
We retain a store's data for as long as the App remains installed, so its reports stay accurate and continuous. If the App is uninstalled, all of that store's data — orders, cost settings, product overrides, connected ad account credentials, and session data — is deleted from our database automatically.
In line with Shopify's mandatory compliance requirements, we also support:
- Customer data requests — since we don't store any customer-identifying data at all, there is typically nothing further to disclose beyond what's already visible in Shopify admin.
- Customer redaction requests — since we don't store any customer-identifying data, there is nothing to redact on our side beyond the standard order-level data covered by shop-level deletion below.
- Shop-level redaction — if requested (or automatically, ~48 hours after uninstall), all of a store's data is permanently deleted from our systems.
Security
Data is stored in a managed, access-controlled database used exclusively by the App, reachable only over encrypted connections. Access is limited to what's needed to operate the App. As with any software, no method of storage or transmission is 100% guaranteed secure, but we take reasonable, ongoing steps to protect the data we hold.
Cookies & tracking
The App runs embedded inside Shopify's admin and relies on Shopify's own session mechanism (App Bridge) to authenticate each request. We do not set third-party advertising or cross-site tracking cookies.
Children's privacy
The App is a business tool intended for use by Shopify merchants and their staff. It is not directed at, and we do not knowingly collect information from, individuals under the age of 16.
Changes to this policy
We may update this policy as the App's features change. The "Last updated" date at the top will reflect the most recent revision. Material changes will be reflected here before they take effect.
Contact us
Questions about this policy, or a request related to your data (access, correction, deletion)? Reach us at hamzamukaty11@gmail.com.
This policy is provided as a general description of the App's data practices and isn't a substitute for legal advice. If your business serves regions with specific requirements (e.g. GDPR in the EU/UK, CCPA in California), consider having this reviewed by a lawyer familiar with those rules before publishing your app publicly.