Privacy Policy

1. Who we are and what this policy covers

COD Intelligence OS ("COD Intelligence," "we," "us," or "our") is a performance analytics and order-operations service for cash-on-delivery commerce. This policy applies to our website, application, support interactions, and integrations.

For account, website, security, and service-administration data, COD Intelligence acts as the responsible service operator. For personal data contained in a merchant's connected orders, storefront, advertising, or shipping account, the merchant normally decides why the data is processed and COD Intelligence acts as its service provider or processor.

2. Information we process

We receive information from you, workspace members, connected services such as Meta, Shopify, and Sendit, and the websites or forms that a merchant configures to send events to COD Intelligence.

3. How we use information

• Authenticate users and operate separate workspaces and brands.
• Synchronize advertising, storefront, order, and delivery data.
• Build funnel, conversion, profitability, delivery, and diagnostic views.
• Match shipments to orders, validate official delivery cities, and push authorized confirmed orders to Sendit.
• Treat verified Sendit delivery, return, and refund states as the logistics source for realized COD revenue calculations.
• Send authorized server-side advertising events, including delivered-order events, to a connected Meta dataset or pixel.
• Detect duplicate or conflicting records, prevent fraud and misuse, troubleshoot errors, and protect the service.
• Provide support, communicate service changes, and comply with legal obligations.

4. Legal grounds

Depending on the relationship and applicable law, we process information to perform our agreement with a user or merchant, follow the merchant's documented instructions, pursue legitimate interests such as securing and improving the service, comply with law, or act on consent where consent is required. A merchant is responsible for choosing an appropriate legal ground and giving required notices for the customer and order data it connects.

5. Connected services and sharing

We disclose information only as needed to operate COD Intelligence, follow an authorized instruction, or comply with law. Recipients may include:

• Meta, when reading authorized Marketing API data or sending authorized Conversions API events.
• Shopify, when importing or synchronizing authorized storefront and order information.
• Sendit, when validating cities, creating shipments, or receiving tracking and delivery status updates.
• Infrastructure and security providers that host the application, database, authentication, logs, and related systems under service obligations.
• Authorities or professional advisers when disclosure is legally required or reasonably necessary to protect rights, safety, and service integrity.

We do not sell personal information or use connected merchant customer data for unrelated advertising. Connected services process information under their own terms and privacy notices.

6. International transfers

COD Intelligence and its service providers may process information in countries other than where a user or customer lives. Where required, the merchant and COD Intelligence must use appropriate safeguards for cross-border transfers and comply with applicable Moroccan data-protection requirements and other applicable laws.

7. Retention and deletion

We keep personal information only for as long as it is needed to provide the service, maintain security and business records, resolve disputes, follow a merchant's instructions, and meet legal obligations. Retention can differ by data type and workspace configuration.

Disconnecting an integration stops new synchronization but does not always delete previously imported records. A verified deletion request removes or de-identifies eligible account and connected data, subject to legal, security, backup, dispute, and fraud-prevention retention. See our Data Deletion Instructions.

8. Security

We use technical and organizational safeguards intended to protect information, including access controls, workspace isolation, protected credentials, transport encryption, logging, and restricted operational access. No online service can guarantee absolute security. Users must protect their login credentials and promptly report suspected unauthorized access.

9. Your choices and rights

Subject to applicable law, you may request access, correction, deletion, restriction, objection, or portability of personal information, and may withdraw consent where processing relies on consent. You may also complain to an applicable data-protection authority.

If your information appears in a merchant's order, contact that merchant first because the merchant controls the customer relationship. We will assist the merchant with a valid request. Workspace users may contact us directly using the details below. We may verify identity and authority before acting.

10. Children

COD Intelligence is a business service and is not directed to children. Users must not intentionally connect children's personal information unless legally permitted and necessary for an authorized business purpose.

11. Changes to this policy

We may update this policy as the service, integrations, or legal requirements change. We will publish the revised policy here and update the effective date. Material changes may also be communicated inside the service or by email.