Privacy Policy
Last updated: June 25, 2026
Codify (“we”, “us”, or “our”) operates Codify – Cash on Delivery Fees for Shopify. This Privacy Policy explains what information we collect, how we use it, and your rights.
Information we collect
We collect only the data necessary to operate the app:
- Shop information: Your Shopify shop domain and store identifier.
- App configuration: COD fee settings, linked payment method handles, and related merchant preferences you configure in the app.
- OAuth session data: Access tokens and session records required for authentication between your Shopify admin and our application.
Information we do not collect
We do not store customer personal information such as names, email addresses, phone numbers, shipping addresses, or order details on our servers. Checkout fee logic runs via Shopify extensions using cart attributes and metafields — customer PII remains within Shopify.
How we use your data
- To authenticate and maintain your app installation.
- To sync fee configuration to checkout extensions.
- To provide support when you contact us.
- To comply with Shopify's mandatory GDPR webhooks.
Data retention and deletion
When you uninstall the app, we receive Shopify's app/uninstalled webhook and delete your session data. Shop data is purged via the shop/redact compliance webhook within 48 hours of an approved deletion request, in accordance with Shopify's requirements.
Data sharing
We do not sell, rent, or share merchant data with third parties for marketing purposes. Data is processed only to provide the service, hosted on Railway (application) and PostgreSQL (database).
Security
We use HTTPS for all traffic, secure OAuth authentication via Shopify, and encrypted database connections. Access tokens are stored securely and scoped to the minimum permissions required.
Your rights
Merchants may request access to or deletion of their data by contacting support@iqapps.app. We respond within 5 business days.
Contact
Questions about this policy? Email support@iqapps.app or visit our Support page.