Privacy Policy

Pulse - Cash on Delivery
Effective date: August 29, 2026

This Privacy Policy explains how PulseSuite (“we”, “us”) collects, uses, stores, and protects information when a merchant installs and uses the Pulse - Cash on Delivery application (the “App”) on their Shopify store. We act as a data processor on behalf of the merchant (the “data controller”) for any personal data processed through the App.

1. Information we access

Data	Source	Why we use it
Store domain, currency, timezone	Shopify OAuth / shop resource	Identify and configure the store's account in the App.
Cart total, shipping country/province, products in cart	Checkout (payment customization function)	Decide whether to show or hide the COD payment method at checkout. Evaluated in Shopify's checkout; not stored by us.
Order details (order ID, order number, order total, currency, payment method)	Order created webhook (`orders/create`, Admin API)	Detect Cash-on-Delivery orders to (a) count them toward your plan's monthly usage limit and (b) apply the auto-tag you configured. The App never adds a fee or otherwise changes the order total.
COD configuration you set	App admin UI	Store your Limit-COD rules, automation and instruction message settings.

Data we do NOT store

The App does not store customer names, email addresses, phone numbers, or addresses in our database. Although the orders/create payload may contain such fields, we only read order identifiers, totals and the payment method; we do not persist customer personal identifiers. Customer conditions for hiding COD are evaluated inside Shopify's checkout function and are not persisted by us.

2. How we use data

To provide core App functionality: limiting/hiding COD at checkout, showing COD instruction messages, and auto-tagging Cash-on-Delivery orders. The App never adds a fee or changes the order total.
To count your COD orders toward your plan's monthly usage limit.
To provide support you request.

3. Data storage & security

Data is stored in a managed PostgreSQL database, encrypted at rest.
All data in transit is protected with TLS/HTTPS.

4. Data retention & deletion

We implement Shopify's mandatory compliance webhooks: customers/data_request, customers/redact, and shop/redact.
When the App is uninstalled, the store's data is deleted from our database.

5. Contact

Questions about this policy or your data? Contact us at pulse@mail.zupport.app.