HideCOD Data Processing Terms
Version: 17 October 2026
Scope
These terms apply when a merchant connects a store to HideCOD and HideCOD processes customer data on the merchant's behalf to provide COD eligibility and risk-management functionality. By installing or using HideCOD, the merchant acknowledges these Data Processing Terms as part of the service relationship.
Agreement and responsibilities
These terms form part of the HideCOD service agreement. A merchant that installs, connects, or uses HideCOD instructs HideCOD to process the data described here for the stated COD eligibility purposes. Merchants remain responsible for their own lawful use of customer data and for providing customer-facing notices where required.
Merchant instructions
HideCOD processes merchant-provided personal data only to operate, secure, support, and improve the contracted COD eligibility service, or as required by applicable law.
Data categories
The Shopify integration uses customer email and phone for matching. HideCOD may also store COD incident metadata such as source store, incident reason, date, and an order reference when needed to support the risk record.
Confidentiality and access
Access to protected customer data is limited to authorized users and service components that need it. Sensitive identifiers and Shopify installation credentials are protected server-side and are not exposed to merchant browser sessions.
Security measures
HideCOD uses role-based access controls, row-level database security, server-side encryption for customer identifiers, encrypted Shopify installation tokens, HMAC verification for Shopify webhooks, HTTPS/TLS, encrypted managed-database backups, and audit logging for protected-data access and administrative activity.
Retention, deletion and return of data
COD incident records have a default retention period of 24 months from the incident date. HideCOD processes Shopify privacy and redaction requests and removes merchant-specific data when required. Data may be removed or anonymized earlier when it is no longer necessary, while longer retention is limited to cases required by applicable law.
Test and production data
Shopify partner development stores are classified as test environments and are kept separate from production merchant stores for HideCOD Network decisions. Test network signals are not used for production-store COD decisions.
Incident handling
HideCOD maintains a security incident response process for investigating material security events, containing affected systems, preserving relevant evidence, and notifying affected merchants or authorities when legally required.
Contact
Questions about these terms can be sent to hidecod1@gmail.com.
See the Privacy Policy.