Privacy policy

COD Affiliates ("we", "us") is a Shopify app that helps merchants run affiliate programs adapted to Cash on Delivery markets. This page describes what data we collect, why, and how we handle it.

Data we receive from Shopify

When you install the app, you grant us read access to your store's orders, products and inventory through Shopify's standard OAuth flow. We use this data exclusively to attribute orders to affiliates and to compute commission states (Pending, In transit, Confirmed). We do not sell, share, or transmit this data to third parties.

Affiliate data

Each affiliate that registers in a merchant's program provides their name, email, payment preference and (optionally) channel/social handles. This data is owned by the merchant and visible only to that merchant inside their app dashboard. We store it on the merchant's behalf.

Cookies and tracking on this website

codaffiliates.com uses Cloudflare Web Analytics, which is cookie-free and does not fingerprint visitors. We do not run third-party advertising trackers on this site.

Data retention and deletion

When you uninstall the app, your data remains for 30 days in case you reinstall. After 30 days it is permanently deleted from our database. You may also request immediate deletion by emailing hello@codaffiliates.com.

GDPR and Shopify mandatory webhooks

We implement Shopify's required GDPR webhooks: customers/data_request, customers/redact, and shop/redact. Requests submitted through Shopify are honored within the timeframes Shopify mandates.

Contact

Questions, deletion requests, or data exports: hello@codaffiliates.com.