Privacy policy
0rto is a Shopify app that gives stores a cash on delivery (COD) order form, offers, and protection against fake orders and returned parcels (RTO). This policy explains what personal information 0rto collects and why, when a store (the “merchant”) installs the app and when the store’s customers use the order form. Himalayan Iris, LLC (“we”, “us”) provides the app.
Information we get from Shopify
When a merchant installs 0rto, Shopify gives us access to the data the app needs, with the merchant’s permission:
- Store details: store name, Shopify address, currency, country and the store’s address on Shopify.
- Products: titles, options, prices and images, so the form can show them.
- Orders: the COD orders the app creates, and how they end (delivered, returned, cancelled), so the app can learn which orders are risky. When a merchant first installs the app, we also read their recent orders to learn delivery history.
- Customers: names, phone numbers, email addresses and delivery addresses on those orders.
- Discounts, payment customizations, themes, files and shipping settings, only to set up the app’s features in the store.
Information merchants give us
- The forms, offers, texts, images and settings they create in the app.
- Block lists they add (phone numbers, emails, IP addresses, PIN codes, places).
- Their plan and wallet top-ups. Payments are handled by Shopify’s billing; we never see card details.
Information from the store’s customers
- What they type in the order form: name, mobile number, email, address, landmark, PIN or postal code, city and state, and an optional note.
- Location, only if they tap “Locate me” or confirm their address on the thank-you page: the map point is used to fill in the address and to help the courier. It is never taken without that tap and the browser’s permission.
- Technical data: IP address, device type, browser and operating system, the page they ordered from and how they reached the store (for example, an ad link), to stop fake orders and to show the merchant where visitors come from.
- Visits: pages viewed on the store, adding to cart, opening the form, and time on the page, stored under a random visitor ID. Where the store shows a cookie banner, this only runs after the customer agrees.
- On the customer’s own device: their details for the next order, unfinished form entries and the order just placed are kept in the browser (local storage), so they don’t have to type again. They can clear this at any time in their browser.
- Confirmation codes: if the store asks for a code, we send it by WhatsApp, Telegram or email and keep it for at most two days.
- WhatsApp answers: if the store asks customers to confirm or cancel an order on WhatsApp, we record which button they tapped.
How we use it
- To show the order form and offers, and to create the order in the merchant’s Shopify store.
- To check that addresses are real and deliverable (for example, that the PIN code matches the area), and suggest corrections.
- To score each order’s risk of being refused or returned, and to stop or flag fake, duplicate or high-risk orders, following the merchant’s settings.
- To send the messages the merchant turned on (order confirmation, “confirm or cancel”, shipping updates, reminders for unfinished orders).
- To send the purchase to the merchant’s ad platforms (Meta, Google, TikTok, Snapchat, Pinterest, X) when the merchant connects them. Names, phone numbers, emails and addresses are hashed (made unreadable) before they leave our server.
- To show the merchant reports (orders, returns, visitors) and to send orders to their Google Sheet if they turn that on.
- To email merchants about their account: a welcome, a weekly report on their store, billing notices, and 0rto news. The weekly report and the news each have their own unsubscribe link.
- To run and support the app: we record what merchants do in 0rto (for example, publishing a form or choosing a plan) so our team can help when something is stuck. These records are kept 180 days.
We do not sell personal information, and we do not use it for our own advertising.
Delivery history across stores (0rto’s Brain)
To protect stores from customers who repeatedly refuse parcels, 0rto keeps a delivery record per phone number: how many parcels were delivered and how many came back. Across different stores, this record is kept under a one-way fingerprint of the phone number, not the number itself. Another store only ever sees counts (for example, “2 delivered, 1 returned”) and a partly hidden address, never the customer’s name, full address or orders at other stores.
Who we share it with
- Shopify, to create and update orders in the merchant’s store.
- Messaging providers (Meta WhatsApp, Telegram, and an email delivery service) to deliver codes, order messages and our emails to merchants.
- Ad platforms chosen by the merchant, in hashed form as above.
- Google, only if the merchant connects a Google Sheet.
- Hosting providers that run our servers and database.
- Authorities, when the law requires it.
Address data comes from public, free sources (India Post, GeoNames, OpenStreetMap, LGD village lists); we do not send customers’ addresses to paid lookup services.
How long we keep it
- Confirmation codes: 2 days. Protection log: 180 days. Ad events: 30 days. Page visits: 90 days; visitor records: 1 year.
- Orders, their addresses and delivery history: while the merchant uses 0rto, because returns are learned over months. They are deleted when Shopify sends us a customer or store deletion request (see below).
Your rights and deletion
Customers can ask the store they ordered from to see or delete their data. Shopify passes these requests to us, and we delete that customer’s records (including their delivery history). When a merchant uninstalls 0rto, Shopify asks us to delete the store’s data 48 hours later, and we delete it. Billing records (wallet top-ups and charges) are kept as accounting law requires; they contain no customer data. Merchants and customers can also write to us at support@0rto.com.
Security
Data is sent over encrypted connections (HTTPS). Every request from Shopify is checked for Shopify’s signature. Access to our servers and database is limited to the people who run the app.
Where data is stored
Our servers may be outside the customer’s or merchant’s country. Where the law requires it, we protect transfers with the safeguards it asks for.
Changes
If we change this policy, we update the date at the top. Important changes are also shown to merchants in the app.
Contact
Himalayan Iris, LLC
131 Continental Dr, Suite 305, Newark, Delaware 19713, USA
support@0rto.com