Privacy

Who is responsible

For your account and your use of mycodos.com, CODOS LLC decides how data is used (the “controller”).

For your buyers’ data — what they type when they order from your store — you are the controller and we process it for you, only to run your store (the “processor”). We follow your instructions, given through the settings and apps you choose.

What we keep

Your account: name, email, phone, the business you tell us about, and what you do inside the builder, so we can run the service and support you. If you sign in with Google or Facebook, we receive your name and email from them — nothing else.

Your plan: which plan you have, its invoices and payments. Your card is typed on our payment provider’s page and never reaches our servers; we only see its brand, last four digits and expiry date.

Your store: products, pages, themes, settings and the orders placed on it.

Your buyers: the name, phone, email, city and address they type to order, and the pages they visit on your store (to show you your store’s statistics).

Technical data: IP address, browser and device, used to keep the service secure, stop fraud and fix errors.

What we do with it, and why

To provide the service you signed up for: run your store, show your orders, send the messages you ask for, take payment for your plan and answer you when you need help.

To keep it safe: detect abuse, fraud and attacks, and meet legal duties such as keeping invoices.

To tell you about your account: bills, security, changes to these policies. Product news only if you agreed, and you can stop it from any such email.

We do not sell personal data, we do not share it for advertising, and we do not use your buyers’ data for our own marketing.

Who else sees it

Only the companies we need to run the service, each receiving only what its job needs: our hosting and network providers (Amazon Web Services, Cloudflare), our email delivery provider, and our payment provider for plan payments.

Tools you connect yourself — WhatsApp, couriers, ad networks such as Meta or TikTok — receive what you choose to send them. When an app sends orders to an ad network, the buyer’s phone is hashed before it leaves.

Stripe, if you set up card payments for your store. When you provide personal data in connection with card payments, Stripe receives that personal data and processes it in accordance with Stripe’s Privacy Policy (stripe.com/privacy). We share with Stripe your business details and the transactions of your store; Stripe verifies your business itself and we never see your identity documents or bank details.

Authorities, only when the law requires it.

Where it is kept

Our servers are run by Amazon Web Services, and Cloudflare’s network delivers pages from the place nearest each visitor. Data may therefore be handled outside your country, including in the European Union and the United States; we protect it the same way wherever it goes.

How we protect it

Connections are encrypted (HTTPS). Passwords are stored only as a one-way hash. Access to data inside our team is limited to what each person needs to do their work.

How long

We keep your data while your account exists. When you close it, we delete your account, stores and buyers’ data, except what the law requires us to keep, such as invoices.

Your rights

You can ask for a copy of your data, correct it, have it deleted, or object to a use of it — from your account settings or by writing to us. We answer within 30 days.

If you live in the European Union, the United Kingdom or California, the GDPR, the UK GDPR or the CCPA give you these rights, and you may also complain to your data protection authority.

Your buyers can ask you, or us, about their data. We pass a request made to us on to you and help you answer it.

Cookies

mycodos.com always uses the cookies and browser storage it needs to keep you signed in and secure.

Everything else waits for your choice in the cookie banner. With “analytics” allowed, we count page visits with our own tool, kept on our servers, and may use Google Analytics; with “marketing” allowed, advertising pixels (Meta, TikTok) may measure our ads. To change your choice, clear this site’s data in your browser and the banner asks again.

Signing in with Google or Facebook opens their page, with their own cookies.

Your store’s visitors also get the cookies of the tools you install yourself (Meta, TikTok…) — those follow your own store’s policy.

Children

CODOS Store is for businesses and people aged 18 or over. We do not knowingly collect data from children.

Changes

When this policy changes, we update the date at the top; for a change that matters to you, we email you first.