Privacy Policy

Flying Star COD Rules. Effective 16 October 2026.

Flying Star COD Rules is a Shopify app made by Flying Star Technologies. It adds a Cash on Delivery fee to orders using rules the store owner sets. This page explains what the app stores, what it does not, and how to reach us.

What we store

• Your shop address (for example your-store.myshopify.com) and the access token Shopify gives the app, so it can run in your store.
• Your settings: the fee type and amounts, order value limits, country and pincode lists, and the products, vendors and product types you pick for free Cash on Delivery. These live in your store as app data.
• Basic details about the staff member who opened the app, such as name and email, only if Shopify provides them at sign-in.
• Standard server logs kept by our hosting provider (request time, page requested and IP address) for security and fixing faults.

What we do not store

We do not store your shoppers’ names, emails, phone numbers, addresses or order contents. At checkout, the fee is worked out by code that runs inside Shopify. It looks at the cart total, the products in the cart, and the delivery country and postal code, only to decide the fee. That information is not sent to our servers and is not kept by us.

How we use data

Only to run the app for your store: to show and save your settings, and to set up the shipping discount and payment rule the app needs. We do not sell data, use it for advertising, or build profiles.

Who we share it with

Shopify, because the app runs on its platform, and our hosting provider, Hostinger, which stores the app’s database. We do not share data with anyone else.

Keeping and deleting data

When you uninstall the app, we delete the stored access token and session records for your shop. When Shopify sends a shop erasure request, we delete the same records again. Because we hold no shopper data, customer data requests and erasure requests from Shopify need no further action from us. Your settings stay in your store and can be removed from there at any time.

Security

The app is served over HTTPS and every Shopify request is verified before we act on it. Stored records sit in a database that only the app can reach.

Security incidents

If we find a security incident that affects data we hold, we revoke and rotate the app’s credentials, fix the cause, and tell affected merchants and Shopify within 72 hours of confirming it. Access to our hosting, database and Shopify partner accounts is limited to named staff, protected by strong passwords and two step sign in, and access is logged.

Your rights

You can ask us what we hold about your shop, ask us to correct or delete it, or withdraw from the app by uninstalling it. We respond under the rules that apply to you, including the GDPR and India’s Digital Personal Data Protection Act.

Changes

If we change how the app handles data, we will update this page and its date.

Contact

Flying Star Technologies
[email protected]