Privacy Policy
Taakid ("the App") is a Shopify application that helps merchants confirm cash-on-delivery orders with their buyers before shipping them. This policy explains what data the App handles, why, and what rights merchants and buyers have.
Our role
The merchant who installs the App is the data controller for their buyers' data. Amrania Labs processes that data on the merchant's behalf, only to provide the App. Shopify Inc. holds the order data as the merchant's commerce platform.
What the App reads, and what it keeps
| Data | Why | Stored by the App? |
|---|---|---|
| Buyer name | To greet the buyer by name in the confirmation message the merchant sends | No. Read from Shopify each time the merchant opens the confirmation board |
| Buyer phone number | To open a WhatsApp chat or a call with the buyer, and to recognise a buyer who refused a delivery before | Never in readable form. Only a keyed one-way hash (HMAC-SHA-256 with a server secret) is stored, which cannot be reversed into the number |
| Shipping city and country | Shown on the board so the merchant can confirm the delivery area, and to pick the message language | No. Read from Shopify when needed |
| Order number, items, total, payment method | Building the confirmation message and the merchant's dashboard | Only the order's Shopify ID, its name (for example #1042) and the confirmation status |
| Confirmation outcomes (confirmed, refused, no answer, refused at delivery) | The merchant's records, holds on unconfirmed orders, and the refuser memory | Yes, as statuses and counters linked to the order ID or the phone hash |
The App does not read or store buyer email addresses, street addresses, payment card data, or browsing behaviour. Messages are sent by the merchant from their own WhatsApp or phone; the App never sends messages itself and never sees their content after the merchant opens the chat.
The checkout rule
If the merchant turns it on, a Shopify Function decides at checkout whether to offer cash on delivery. It receives a list of short hashes of the phone numbers of buyers who refused a delivery, computed with a random per-store salt, and compares them with a hash of the phone number entered at checkout. The Function runs inside Shopify; no checkout data is sent to the App's servers.
Data about merchants
The store's domain, the App settings (message templates, languages, hold and checkout-rule options) and the subscription plan. Billing is handled entirely by Shopify.
Retention and deletion
- Order statuses are kept while the App is installed so the merchant can see their history.
- When Shopify sends a
customers/redactrequest, the App deletes that buyer's phone hash, counters and order records. - When the merchant uninstalls, sessions and plan data are deleted at once, and Shopify's
shop/redactrequest 48 hours later deletes everything else.
Security
Data is stored in a managed PostgreSQL database run by our hosting provider, Railway, on a private network reachable only by the App. Webhooks from Shopify are verified by HMAC signature. Connections use TLS. The full measures are in our security and data protection policy.
Sub-processors
| Provider | Purpose |
|---|---|
| Shopify Inc. | Commerce platform, authentication, billing |
| Railway Corp. | Application hosting and database |
Your rights
Buyers can ask the merchant to access or delete their data; the merchant's request reaches the App through Shopify and is acted on automatically. Merchants can contact us at hello@amrania.com for any privacy question. We answer within 30 days.
Changes
We will update this page if the App's data handling changes, and change the date above.