Privacy Policy
Last updated: December 4, 2024
1. Introduction
Curetfy COD Form ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Shopify application.
2. Information We Collect
2.1 Store Information
When you install our app, we collect:
- Store domain name
- Store owner email (for support purposes)
- Access tokens provided by Shopify for API access
2.2 Customer Information
When customers submit orders through our form, we collect:
- Full name
- Phone number / WhatsApp
- Email address (if provided)
- Delivery address
- City and province/state
- Order notes (if provided)
2.3 Order Information
- Product details (title, variant, quantity, price)
- Order totals and discounts
- UTM tracking parameters (if present)
- Timestamp of order creation
2.4 Technical Information
- IP address (for fraud prevention)
- Browser user agent
- Page URL where form was submitted
3. How We Use Your Information
We use the collected information to:
- Process and fulfill COD orders
- Send order details to WhatsApp
- Create draft orders in Shopify (if enabled)
- Provide analytics and reporting to store owners
- Improve our services and user experience
- Communicate with merchants about their account
- Comply with legal obligations
4. Data Sharing
We do NOT sell your personal information. We may share data with:
- Shopify: To create orders and access store data via their API
- WhatsApp: Order details are sent via WhatsApp Web URL (no API storage)
- Store Owners: Customer order data is visible to the merchant
- Legal Requirements: When required by law or legal process
5. Data Retention
- Order data is retained for as long as the merchant's account is active
- When you uninstall our app, we retain data for 48 hours per Shopify requirements
- After 48 hours post-uninstall, all shop data is permanently deleted
- Customer data deletion requests are processed within 30 days
6. Data Security
We implement industry-standard security measures:
- All data transmission uses TLS/SSL encryption
- Database access is restricted and monitored
- Access tokens are stored securely
- Regular security audits and updates
7. Your Rights (GDPR & CCPA)
You have the right to:
- Access: Request a copy of your personal data
- Rectification: Request correction of inaccurate data
- Erasure: Request deletion of your data
- Portability: Request your data in a portable format
- Objection: Object to certain processing of your data
To exercise these rights, contact us at: privacy@curetcore.com
8. Cookies and Tracking
Our app does not use third-party cookies. We may use:
- Session tokens for authentication (required by Shopify)
- Local storage for form state (cleared after submission)
- UTM parameters from URL for attribution tracking
9. Third-Party Services
Our app integrates with:
10. Children's Privacy
Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children.
11. International Data Transfers
Your data may be processed in servers located outside your country. We ensure appropriate safeguards are in place for international transfers.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify merchants of significant changes via email or in-app notification.
13. Contact Us
For privacy-related inquiries:
Curetfy COD Form is developed by CURET / Curetcore
This app is designed for Shopify merchants in Latin America and worldwide.