Privacy Policy

Last updated: February 2026

Order Digest ("the App") is operated by KODIFY SRL, based in Chisinau, Republic of Moldova ("we", "us", "our"). This policy describes how we collect, use, and protect your information when you install and use the App.

1. Information We Collect

When you install the App, we access the following through Shopify's API:

• Order data — order number, date, customer email, phone number, billing/shipping address, line items, totals, and fulfillment status. This data is accessed in real-time to generate digest reports and is not permanently stored.
• Shop information — your myshopify.com domain, used to identify your store.

We do not collect any information directly from your customers. The App does not use cookies, tracking pixels, or any other tracking technologies on your storefront.

2. Information We Store

• Digest settings — your preferred send time, timezone, and recipient email address.
• OAuth session tokens — required to authenticate API requests on your behalf.

We do not store order data, customer personal information, or payment details in our database.

3. How We Use Your Information

• To generate and email CSV order digest reports at your configured schedule.
• To authenticate your store and maintain your session.
• To process billing through Shopify's built-in billing system.

4. Third-Party Services

• Resend — used to deliver digest emails. Resend processes the recipient email address and email content. See Resend's Privacy Policy.
• Shopify — billing is handled entirely through Shopify's platform. We never collect payment information directly.

5. Data Location & Cross-Border Transfers

Our servers are located in Ashburn, Virginia (United States). If you are located outside the United States, please be aware that your data (digest settings, session tokens) is processed and stored on servers in the US. By using the App, you consent to this transfer. Email delivery is processed by Resend, which may process data in various locations globally.

6. Data Retention & Deletion

When you uninstall the App, all stored data (sessions, settings) is automatically deleted. Shopify also sends a shop redaction request 48 hours after uninstall, which triggers a second cleanup pass.

7. Data Security

All data is transmitted over HTTPS. OAuth tokens are stored securely in our database. We follow Shopify's security best practices for app development.

8. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Correct any inaccurate or incomplete data.
• Delete your data — you can do this at any time by uninstalling the App, or by contacting us.
• Restrict processing of your personal data in certain circumstances.
• Data portability — request a copy of your data in a structured format.

If you are in the European Economic Area, you also have the right to lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us at the email address below.

9. Contact

For privacy-related questions, contact us at: support@kodifyconsulting.com

KODIFY SRL — Chisinau, Republic of Moldova, MD-2051.
Full registered address available upon request.