Privacy Policy

1. Introduction

Form Fever Technologies Pvt Ltd ("we", "our", or "us") operates the PenguinCOD Shopify app and this marketing website. We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our app, services, or visit our website.

2. Information We Collect

We collect information in the following ways:

Merchant Data

• Shop and store information from your Shopify account
• App configuration and settings (prepayment amounts, restrictions, customization)
• Order data for COD orders that use partial prepayment
• Analytics and usage data related to the app

Customer Data (Your Store Customers)

• Order information including names, addresses, phone numbers when processing COD deposits
• Payment information for deposit transactions (processed by payment gateways)
• Remaining balance information stored as order metafields

Website Visitors

• Basic analytics (page views, referral sources)
• Information you provide when contacting us

3. How We Use Your Information

• To provide and operate the PenguinCOD app and its partial prepaid COD functionality
• To process deposit payments and track remaining balances on COD orders
• To apply your configured restrictions (product, collection, pincode-based)
• To send order confirmations and automated notifications
• To improve our app, fix bugs, and develop new features
• To comply with legal obligations and respond to lawful requests
• To communicate with you about the service and support requests

4. Data Sharing and Third Parties

We share data only as necessary to provide our services:

• Shopify: Your store data is shared with Shopify to integrate our app with your store. Shopify has its own privacy policy governing that data.
• Payment Gateways: Deposit payments are processed by payment providers (e.g., Razorpay, UPI, and other gateways you have configured). We do not store full payment card details.
• Hosting and Infrastructure: Our app is hosted on third-party infrastructure (e.g., Render.com). Data may be stored and processed in those environments.
• Legal Requirements: We may disclose information if required by law or to protect our rights and safety.

We do not sell your personal information or customer data.

5. Data Retention

We retain data only as long as necessary to provide our services and fulfill the purposes described in this policy. Order and transaction data is retained in accordance with your Shopify store settings and applicable legal requirements. When you uninstall the app, we will delete or anonymize your data in accordance with our data deletion procedures and applicable law.

6. Data Security

We implement appropriate technical and organizational measures to protect your data, including encryption in transit, secure databases, and access controls. Payment card data is handled by PCI-compliant payment processors and is not stored by us.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data
• Portability: Request a copy of your data in a structured, machine-readable format
• Object or Restrict: Object to processing or request restriction of processing

For merchants: Shopify apps must support data request and data deletion webhooks. We comply with GDPR data subject requests through Shopify's required webhook endpoints. To exercise your rights, contact us using the details below or through your Shopify admin.

If you are in the European Economic Area or UK, you may also have the right to lodge a complaint with a supervisory authority.

8. Cookies and Tracking

Our marketing website may use cookies and similar technologies for analytics and to improve your experience. Our app uses cookies and local storage as required for Shopify app authentication and functionality. You can control cookie preferences through your browser settings.

9. International Transfers

Your data may be transferred to and processed in countries other than your own. We take steps to ensure that such transfers comply with applicable data protection laws, including through appropriate safeguards where required.

10. Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal information from children. If you believe we have collected such information, please contact us and we will take steps to delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. For significant changes, we may provide additional notice such as an email to merchants. We encourage you to review this policy periodically.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: