Privacy Policy

Last Updated: June 13, 2026

1. Introduction

ByteInfy COD & Partial Pay ("we," "us," "our," or "Company") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our Shopify application.

2. Information We Collect

When you install and use our app, we collect:

Shop information: store domain, access tokens (stored encrypted), plan tier, and merchant-configured settings.
Order data: order IDs, totals, payment state, deposit/balance breakdown, and related order metadata.
Customer identifiers (as required for app functionality): phone number for OTP verification, email address for order notifications, and coarse order metadata.
Location data: delivery pincode (for COD blocking rules you configure).
Usage analytics: feature views, conversion events, and exit-intent triggers used to improve the app.
Merchant admin session analytics: anonymized interaction data (clicks, scrolls, navigation, and session recordings) captured within the embedded admin dashboard via Microsoft Clarity to help us understand usage and diagnose issues. This applies only to you, the merchant, inside the app's admin interface — not to your storefront customers.

3. How We Use Your Information

We use the information we collect to:

Provide, operate, and maintain the application
Process partial-payment orders, collect deposits, and reconcile balances
Send OTP codes, order notifications, and recovery messages
Improve, personalize, and expand our services
Detect and prevent fraud and abuse
Comply with Shopify platform requirements and applicable law

4. Data Security

We implement appropriate technical and organizational measures designed to protect your information against unauthorized access, alteration, disclosure, or destruction. Access tokens are stored encrypted. However, no method of transmission over the Internet is 100% secure.

5. Third-Party Services

Our application integrates with the following sub-processors in order to operate:

Shopify — primary platform and data source; hosts the embedded app.
Amazon Web Services (AWS SES) — transactional email delivery.
2Factor.in — SMS/OTP delivery for Indian phone numbers.
Meta / WhatsApp Business Platform — WhatsApp messaging, only when enabled by the merchant.
Microsoft Clarity — product analytics (session replay and heatmaps) for the embedded admin dashboard. It sets first-party and third-party cookies to enable session analytics. Used only to understand how merchants interact with the app interface and to diagnose issues.

Each sub-processor has its own privacy practices. We do not sell or share your data with other third parties without your consent.

6. Data Retention

We retain shop and order data for as long as the app is installed and your subscription is active. On uninstall, the Shopify app/uninstalled webhook triggers a soft-delete of shop data. The customers/redact and shop/redactwebhooks (processed within 48 hours of a Shopify request) permanently remove customer PII and shop data respectively. The customers/data_request webhook supports data export requests.

7. Your Rights

Depending on your location, you may have rights regarding your personal data, including the right to access, correct, export, or delete your information. Contact us at [email protected] to exercise these rights.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by updating the "Last Updated" date above.

9. Contact Us

If you have questions about this Privacy Policy, please contact us at:
Email: [email protected]