01Overview
Oderfy is a service that merchants connect to their Shopify store so that an AI voice agent can call the merchant’s own customers to confirm cash-on-delivery (COD) orders before they ship. This policy explains what information Oderfy processes, why, and how it is protected.
For order and customer data that flows from a merchant’s Shopify store into Oderfy, the merchant is the data controller and Oderfy acts as a data processor. We process that data only to provide the service the merchant has configured, not for our own independent purposes. Oderfy has no direct relationship with the merchant’s customers; their relationship, including any consent to be contacted where required, is with the merchant.
Oderfy is a business-to-business service for merchants operating a commercial Shopify store. It is not directed at children.
02Data we process
- Merchant account
- Name, email address, and password (stored only as a one-way hash; we cannot recover it), plus your plan and billing status.
- Store connection
- Your store’s domain, the access token Shopify issues when you connect (encrypted at rest), and the permissions you granted.
- Orders and products
- Order and product identifiers, product name and variant, price, and the customer details needed to confirm the order by phone: name, phone number, email address, and shipping or billing address.
- Call data
- The outcome of each confirmation call (for example confirmed, cancelled, a requested change, no answer or unclear) and operational details such as timing, stage reached and retry count.
- Billing
- Your plan, prepaid wallet balance, and top-up and usage history.
- Logs and sessions
- Standard operational logs used to run and secure the service, and a sign-in token stored in your browser. We do not use third-party advertising or analytics cookies.
We do not request payment card details, marketing preferences, or a customer’s full order history. Call audio is not offered as a feature: our systems keep only an internal reference to where a recording might exist on our telephony infrastructure, and there is currently no way to retrieve or play it back. If that changes, this policy will be updated before the feature is enabled.
03Shopify connection and read-only access
You connect your store through Shopify’s own authorization screen. Oderfy requests exactly two read-only permissions, read_orders and read_products, and nothing broader.
- Oderfy never edits your Shopify orders. Call outcomes and change requests are shown in Oderfy for you to act on.
- Your Shopify access token is encrypted at rest with a dedicated key, never logged, and refreshed before it expires.
- Disconnecting your store stops new orders from syncing.
04AI confirmation calls and customer phone numbers
When a new COD order arrives, Oderfy uses the customer’s phone number from that order to place an AI confirmation call on the merchant’s behalf. Calls are placed within the calling hours the merchant configures, with automatic retries when the customer does not answer.
The customer’s own spoken answer determines the recorded outcome; the AI does not decide it without the customer’s participation. The outcome is shown to the merchant as information. It does not, by itself, cancel, ship, refund or otherwise change the order. The merchant decides what happens next.
Phone numbers are used only to place these confirmation calls for the merchant who received the order. They are not used for marketing.
05How data is used
- To detect new COD orders from your connected Shopify store.
- To place AI confirmation calls in the language you configure and record the outcome.
- To show order and call status in your Oderfy dashboard.
- To operate and secure the service, including abuse prevention and debugging.
- To bill your account according to your plan and prepaid wallet balance.
- To honour Shopify’s mandatory data-request and data-erasure requirements.
We do not sell personal data, and we do not use customer data for advertising or marketing profiling.
07Retention
We keep personal data only as long as needed for the purposes above, or as required by law (for example accounting records). At minimum, data is retained while your store remains connected, and it is redacted in response to Shopify’s mandatory data-erasure requests.
08Security
Measures in place today:
- Shopify access tokens are encrypted at rest and never logged.
- All traffic to the service is encrypted in transit (HTTPS/TLS).
- Data is scoped to your own account; no merchant can see another merchant’s data.
- Internal access to customer data requires a separate permission, and every such access is logged.
- Shopify’s mandatory webhook requests are cryptographically verified before we act on them.
We are still working on broader encryption of order data at rest, encrypted off-site backups, and multi-factor authentication for internal accounts. We will list each one here once it is complete rather than claim it early.
09Your rights
Merchants can ask for a copy or deletion of their account data, or disconnect their store at any time, by contacting us.
Customers of a merchant using Oderfy should contact that merchant directly. Shopify’s mandatory privacy webhooks are how such requests reach us: a customer data request is recorded for fulfilment, and redaction requests permanently remove the name, phone number, email and address from the affected order records. A whole store’s data is redacted only after the store has been disconnected.
10Contact
Questions about this policy, or a request about your data, can be sent to oderfy.com@gmail.com.
When this policy changes, we will update the date at the top of this page and will not reduce your rights without clear notice.