Chaukas

Privacy policy

Last updated 1 October 2026

Chaukas is a Shopify app that lets merchants hide Cash on Delivery (COD) at checkout when an order matches rules they set up. This page explains what the app stores, why, and for how long.

What we collect

About the merchant's store: the store domain, currency, timezone, an access token issued by Shopify, the rules, pincode lists and settings created in the app, and the subscribed plan (billing is handled by Shopify).

About the merchant's customers, to work out COD risk:

• Order ids, order numbers, order dates, subtotals, payment method names, and whether a COD order was delivered, returned (RTO) or cancelled, worked out from order status, fulfillment status and order tags.
• The Shopify customer id of logged-in buyers and their number of COD orders, deliveries and returns.
• The shipping pincode of each order.
• For phone numbers: only a salted one-way hash and the last 4 digits. We never store the full number.
• Product ids, titles, tags, types and collections of ordered items, to explain which products rules affect.

We do not store customer names, email addresses or street addresses. Names shown in the app are fetched live from Shopify and not saved.

How we use it

Only to provide the app: to evaluate the merchant's rules at checkout and on placed orders, to show the merchant COD and RTO statistics, and to keep COD history that Shopify checkout can read. COD history is written to an app-owned customer metafield and, for guest buyers, to an app-owned shop metafield containing hashes only. We do not sell data, share it for advertising, or combine it across stores.

Who else handles it

• Shopify, which provides the platform and runs the checkout rules.
• Our hosting provider (Fly.io, Singapore region), which runs the app's server and database.

Data is encrypted in transit and at rest. Only our authorised staff, using two-factor authentication, can access it, and each time someone opens customer data in the app we log who and when (not the data itself).

How long we keep it

• Order records, and the COD history built from them, are deleted automatically after 18 months.
• Records of which staff member opened customer data in the app (the access log) are deleted after 12 months.
• When Shopify sends a customer redaction request, we delete that customer's orders, history and phone hash.
• 48 hours after uninstall, Shopify asks us to erase the store; we then delete everything we hold for it.

Your rights

Merchants can ask what we hold, or ask for correction or deletion, by writing to birennayak845@gmail.com. Shoppers should contact the store they bought from; the store can request their data or its deletion through Shopify, and we act on those requests. Our data processing terms for merchants are in the terms of service.