Privacy Policy

COD Fraud Stop — Shopify Application

Effective Date: May 16, 2026 Last Updated: May 16, 2026 Developer / Company: Loopify Labs Owner: Yusdanila Contact Email: loopifylabs@gmail.com Website: https://anti-gravity-production-9d16.up.railway.app


1. Introduction

This Privacy Policy explains how Loopify Labs ("we", "us", or "our") collects, uses, stores, and protects information when you ("Merchant") install and use the COD Fraud Stop application ("the App") on your Shopify store.

We are committed to protecting personal data and operating in full compliance with applicable privacy laws including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and Indonesia's Personal Data Protection Act (PDPA 2024).

By installing the App, you acknowledge that you have read, understood, and agree to this Privacy Policy.


2. Who We Are and Our Role

As a Data Processor. When you use COD Fraud Stop, we act as a data processor on your behalf. You (the merchant) are the data controller for your customers' personal data. We process your customers' data only on your instructions and only for the purposes of providing fraud detection services.

Our legal basis for processing (where GDPR applies): We process personal data under Article 6(1)(f) — legitimate interests — specifically the legitimate interest of merchants in preventing fraud and protecting their business from financial loss.


3. Information We Collect

3.1 Information from Merchants (You)

When you install the App, we collect:

Data Purpose Stored?
Shopify store domain App authentication and data scoping Yes
Shopify access token API authentication (encrypted) Yes
App configuration settings To apply your risk tolerance preferences Yes
Blacklist entries you create Core fraud detection functionality Yes

3.2 Information from Your Customers (Processed on Your Behalf)

To perform risk analysis on your orders, we temporarily access and process the following customer data via the Shopify API:

Data Purpose Stored?
Customer phone number Fuzzy matching against blacklist No — processed in memory only
Customer email address Fuzzy matching against blacklist No — processed in memory only
Shipping address (line 1) Fuzzy matching against blacklist No — processed in memory only
Order tags Risk classification and return reason analysis No — processed in memory only
Order ID and name Display within the App dashboard No — processed in memory only