Privacy Policy

Effective date: 2026-10-25 · Last updated: 2026-10-25

Khaleeji COD (“the app”, “we”, “us”) is a Shopify app published by Trifid Media LLC, Dubai, United Arab Emirates. It lets merchants hide, limit or rename Cash on Delivery at checkout. This policy explains what the app accesses, why, and where that data goes.

In short:

• We do not store your customers’ personal data on our servers.

• We never request customer names, email addresses, phone numbers or postal addresses.

• Your settings live inside your own Shopify store.

• We do not sell, rent or share data, and we do not use it for advertising or AI training.

1. Data the app accesses in your store

The app uses these Shopify permissions:

PermissionWhat we use it for
read_payment_customizations
write_payment_customizations		 Create Khaleeji COD’s checkout rule and save your rule settings to it.
read_orders Only when you run “Scan orders”: read cancelled orders from the last 60 days (order ID, payment method names, cancellation status, whether the order was fulfilled, and the customer’s ID and tags) to find cancelled cash-on-delivery orders and count the ones that had shipped, for the money-lost report.
read_customers Read a customer’s ID and tags, to know who is already tagged cod-refused.
write_customers Add the cod-refused tag to customers, only when you click “Tag customers”.

We do not request access to customer names, email addresses, phone numbers or postal addresses, and we do not access payment card details (Shopify handles payments; we never see them).

2. What happens at checkout

Khaleeji COD’s checkout rule runs inside Shopify’s own infrastructure (Shopify Functions). For each checkout it looks at the cart total, the customer’s tags and number of previous orders, the shipping country, emirate/region and city, product tags, and the shopper’s language, and decides whether to show, hide or rename Cash on Delivery. This information is processed by Shopify for that checkout only. It is not sent to us and we do not store it.

3. Where your settings are stored

Your rule settings are saved in your own Shopify store, on Khaleeji COD’s checkout rule. The scan results and the “money lost” report are calculated in your browser and are not saved. The admin page remembers your language choice (English or Arabic) in your browser only.

4. Our servers

A small service on Cloudflare delivers the admin page, receives Shopify’s mandatory privacy webhooks, and asks Shopify which plan your store is on. It handles your store’s domain and Shopify-issued session tokens to check that requests are genuine. It does not store merchant or customer data, and we do not keep logs containing customer data.

5. Billing

Subscriptions are billed by Shopify through your Shopify invoice. We never see your payment details.

6. Service providers

We do not use any other third parties to process your store’s data.

7. Retention and deletion

Because we store no store or customer data on our servers, there is nothing to delete on our side. When you uninstall Khaleeji COD, Shopify removes its checkout rule together with the settings saved on it. Tags the app added (cod-refused) are ordinary Shopify customer tags and stay in your store until you remove them (Shopify admin → Customers → filter by tag).

8. Requests from your customers

If one of your customers asks to access or delete their data (for example under GDPR or the UAE PDPL), we will confirm that Khaleeji COD holds no data about them. You can remove the cod-refused tag from that customer in your Shopify admin at any time. Shopify’s mandatory privacy webhooks are received and acknowledged.

9. Security

10. Children

Khaleeji COD is a business tool for Shopify merchants. We do not knowingly collect data from anyone under 18.

11. Changes to this policy

If we make material changes, we will update the date at the top of this page and tell active merchants through the app or by email.

12. Contact