CourierCop: Overcharge Audit Privacy Policy

CourierCop: Overcharge Audit ("CourierCop", "the app") is a Shopify app developed and operated by Harsh Dumasvala, a sole proprietor trading as KD Scale Agency ("we", "us", "our"), at A/102, Sunrise Residency, Green Park Soc., Utran, Surat, Gujarat 394105, India. It checks the shipping bills an Indian Shopify store receives from its couriers against the store's own rate cards, explains any differences and helps the merchant prepare claims.

We decide how and why personal data collected through the app is processed, and we are responsible for it under applicable data protection laws, including India's Digital Personal Data Protection Act, 2023.

This policy covers the data the app handles for merchants who install it, including any personal data that appears in their store or courier records. It doesn't cover our own website; that's in our website Privacy Policy, linked at the end of this page.

CourierCop is in development and isn't on the Shopify App Store yet. This policy describes how the app is built to handle data today. If anything changes before or after launch, we'll update this page first.

For your account and settings in the app, we decide how the data is used, so we're responsible for it. For the order and shipment data that comes from your store, you (the merchant) are responsible for your customers' data, and we process it only to provide the app to you.

If one of your customers asks about their data, please reply to them directly. Requests they make through Shopify reach us automatically (see "Deletion and Shopify data requests").

We use the information only to provide CourierCop to your store:

• Match bill rows to your Shopify shipments and work out what each shipment should have cost under your rate card.
• Show findings, reports and deadlines, and prepare claim letters and evidence for you to send to the courier yourself.
• Send the emails you turn on: a monthly report, a daily digest of claim-ready findings and deadline warnings.
• Apply your plan's limits, answer your support requests and keep the app secure and working.

We share data only with the providers we need to run the app, and only what each one needs:

• Shopify, where the app runs and where your store data comes from. Shopify also handles app billing.
• Hostinger, which hosts the server where the app and its database run, in India.
• Cloudflare, which carries and protects traffic to the app.
• Resend, which delivers the app's emails to the address you chose, and your Help-tab messages to us.

We protect the data with measures that include:

• Encrypted connections (HTTPS) for all traffic to the app.
• Encryption at rest for the database, stored bill files, claim documents and backups.
• Shopify access tokens stored encrypted.
• Each store sees only its own data. Every request from your Shopify admin is checked against Shopify's session token, and webhooks from Shopify are verified before they're processed.
• Server access limited to our team, by key only. Our logs mask tokens, emails, phone numbers and addresses.

• Uploaded bill files: deleted 90 days after upload. The checked bill rows stay while you use the app.
• Claim documents and letters: deleted 90 days after the claim is finished.
• App logs: deleted after 14 to 30 days.
• Records of the webhooks Shopify sends the app, failed ones included: deleted after 30 days.
• Everything else, including orders, bill rows, claims, settings and support messages: kept while the app is installed, and deleted after you uninstall (see below).
• Encrypted backups are replaced on a rolling basis, so deleted data drops out of them within 7 days.

CourierCop handles Shopify's mandatory privacy requests:

• When you uninstall the app, it stops reading your store straight away. About 48 hours later Shopify asks us to erase the store's data, and we delete everything the app holds for your store, including stored files.
• When one of your customers asks Shopify to erase their data, we remove the delivery destination stored for their orders and clear the pincode on the bill rows and findings for those orders. Only the courier bill file you uploaded still holds the pincode, and any other details as the courier sent them, until the file is deleted 90 days after upload.
• When a customer asks Shopify for a copy of their data, there are no names or contact details for us to return: only the delivery destination described above is kept.

As a merchant, you can ask us to:

• Tell you what data the app holds about your store and give you a copy.
• Correct or update it.
• Delete it sooner than the periods above.

CourierCop is for stores based in India, and the app's server and database are in India. Our service providers, including Shopify, Cloudflare and Resend, may store or process data in other countries. When they do, it's covered by their own security and privacy commitments.

The app sets no cookies of its own and uses no analytics, advertising pixels or tracking. Your browser stores a few display preferences for the app, such as a chosen date range and dismissed tips. Help videos load from YouTube's privacy-enhanced domain only when you click play. Shopify sets its own cookies in your Shopify admin under Shopify's privacy policy.

CourierCop is a business tool for Shopify merchants. It isn't meant for anyone under 18, and we don't knowingly collect children's data.

We'll update this page and the dates at the top whenever the app's data practices change. If a change materially affects how we use your data, we'll tell you in the app or by email before it applies.

If you have questions about this policy or CourierCop, want to access, correct or delete your data, or want to raise a complaint, contact our Grievance and Privacy Contact. We aim to respond to every request within 30 days.

Please include your myshopify domain so we can find your store.

• Harsh Dumasvala (Grievance / Privacy Contact), KD Scale Agency
• Address: A/102, Sunrise Residency, Green Park Soc., Utran, Surat, Gujarat 394105, India
• Email: hello@kdscaleagency.com
• Phone: +91 79846 62127
• Website: kdscaleagency.com