Replyeo CODReplyeo COD
Shopify App Store & GDPR Compliant

Privacy Policy

Last Updated: November 14, 2026 • Effective Immediately

Replyeo COD (“we”, “us”, “our”) is an official Shopify application developed, operated, and maintained by ReplyEO (parent company URL: replyeo.com). This Privacy Policy explains our practices regarding the collection, usage, processing, and protection of information when you install and use our Shopify application and associated services.

1. Information We Collect

When you install ReplyEO COD on your Shopify store, we automatically access certain types of information from your Shopify account via official Shopify APIs:

  • Merchant Account Data: Your store domain (.myshopify.com), primary email address, store owner name, store currency, timezone, and authorized OAuth access tokens.
  • Order & Customer Data: Order IDs, order financial status, order fulfillment status, line items, order totals, customer first/last name, phone number, shipping address, and order notes necessary for Cash on Delivery (COD) verification and AI address validation.
  • Communication Records: Automated WhatsApp confirmation message logs, customer reply texts (“Confirm”, “Cancel”, address updates), delivery receipts, and timestamps.

2. How We Use Collected Information

We process this data strictly to provide, optimize, and secure the services requested by you:

  • Sending automated WhatsApp interactive messages for order confirmation, order cancellation, and shipping tracking updates.
  • Running 3-tier AI address validation algorithms to detect incomplete shipping addresses and prompt customers for missing house/street details or GPS location pins.
  • Updating your Shopify store order tags (e.g. COD-Verified, COD-Cancelled, COD-Address-Updated) and customer shipping address notes in real time.
  • Powering the optional 24/7 AI Customer Support Bot trained on your store policies and live product catalog.
  • Triggering automated WhatsApp sequences to recover abandoned checkouts.
  • Calculating your store's monthly order verification quotas, RTO reduction metrics, and generating analytics reports.

3. Integration with Meta Platforms (WhatsApp Cloud API)

ReplyEO COD interacts directly with the Official Meta WhatsApp Business Cloud API. Customer phone numbers and message contents are transmitted securely over TLS/HTTPS encryption to Meta servers for message dispatch and delivery confirmation. We do not sell, rent, or trade merchant or customer phone numbers to any third party for marketing or advertising purposes.

4. Data Storage, Security & Encryption

We maintain rigorous technical and organizational safeguards to protect your store data:

  • All communications between Shopify, our servers, Meta Cloud API, and your customers are encrypted in transit using industry-standard TLS 1.3 encryption.
  • Sensitive credentials such as Meta access tokens and merchant API keys are stored in encrypted databases with restricted access control.
  • Our production infrastructure is hosted on enterprise-grade cloud servers with automatic security patching, firewalls, and 24/7 monitoring.

5. Mandatory Shopify Webhooks & Data Deletion (GDPR / CCPA)

ReplyEO COD fully supports and enforces Shopify's mandatory privacy webhooks:

  • Customers Data Request (customers/data_request): If a customer requests a copy of their personal data, we provide all associated message logs and verification records within the timeframe required by law.
  • Customers Redact (customers/redact): If a customer requests deletion of their personal information, our systems permanently sanitize their name, phone number, and address from our database records within 48 hours.
  • Shop Redact (shop/redact): When a merchant uninstalls ReplyEO COD, all active automations are instantly terminated, sessions are revoked, and merchant-specific databases are scheduled for permanent purge in accordance with Shopify partner guidelines.

6. Sharing with Third-Party Courier Services

At your explicit direction, ReplyEO COD can synchronize verified customer addresses and order statuses with supported third-party courier services (e.g. Trax, Leopards, CallCourier, PostEx). We only transmit the data fields necessary to book and fulfill the shipment.

7. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect operational, legal, or regulatory changes. When updates are published, the “Last Updated” date at the top of this page will be revised accordingly. Continued use of ReplyEO COD following any changes constitutes acceptance of the updated terms.

8. Contact Us & Parent Company Details

If you have any questions, privacy concerns, or data protection inquiries, please contact our legal and data protection team:

Application: ReplyEO COD
Parent Company: ReplyEO (replyeo.com)
Email Support: support@replyeo.com
Headquarters: ReplyEO Technologies, Customer Privacy & Compliance Division