COD Shield

Terms of service

Last updated October 29, 2026

These terms are between Nexus Cloud Services (“we”) and the merchant who installs COD Shield on a Shopify store (“you”). By installing or using the app you agree to them, together with the data processing terms below and our privacy policy.

The service

COD Shield records your cash on delivery orders, lets you mark refused ones, and hides cash on delivery at checkout for buyers you have blocked or who match the rules you set. You decide which buyers are blocked and which rules apply, and you can unblock or trust a buyer at any time. You are responsible for using the app lawfully, including telling your customers how you use their information.

Plans and billing

The Free plan costs nothing. Paid plans are billed by Shopify on your Shopify invoice, at the price shown when you choose the plan, and can include a free trial. You can change or cancel your plan, or uninstall the app, at any time. Charges already billed are not refunded except where Shopify’s billing rules or the law require it.

Acceptable use

Don’t use the app to break the law, to discriminate against buyers on a protected ground, to interfere with the service, or to access other stores’ data.

Availability and changes

We work to keep the app running, but it is provided “as is”. Hiding cash on delivery depends on Shopify Functions and Shopify’s checkout, which we don’t control. We may change or improve features. If a change affects what you pay or removes a feature you use, we will tell you in the app or by email first.

Liability

As far as the law allows, we are not liable for indirect or lost-profit damages, and our total liability is limited to the fees you paid for the app in the 12 months before the claim.

Ending

You can stop using the app by uninstalling it. We may suspend an account that breaks these terms. After uninstalling, your store’s data is deleted as described in the privacy policy.

Changes to these terms

We will post changes on this page with a new date. Material changes will also be announced in the app at least 14 days before they apply.

Data processing terms

These terms apply to personal information about your customers that the app processes for you (“buyer data”), as described in the privacy policy.

Roles and instructions

You are the controller of buyer data and we process it on your behalf. We process it only to provide the app, following your instructions as given through the app’s settings and actions, and never for our own purposes or to sell it.

Confidentiality and security

• Only we can access the production systems, using SSH keys; password login is off.
• Buyer names, phone digits and notes are encrypted in the database with AES-256-GCM. Phone numbers and addresses are stored only as hashes plus the last 4 digits.
• Database backups are encrypted with AES-256 and deleted after 14 days.
• The app is served only over HTTPS, and the database is not reachable from the internet.
• Requests from Shopify are checked with Shopify’s signature before we act on them.

Sub-processors

Shopify, which runs your store and checkout, and OVHcloud, which hosts our server and database. We will update this page before adding another sub-processor.

Requests and incidents

When a customer asks to see or delete their data, Shopify sends the request to us and we act on it as the privacy policy describes. We will help you answer other requests if you ask. If we become aware of a security incident affecting buyer data, we will notify you without undue delay and within 72 hours, with what we know and what we are doing about it.

Deletion

When you uninstall the app, Shopify asks us to delete your store’s data 48 hours later and we delete it. Encrypted backups containing it are deleted within 14 days.

Contact

Nexus Cloud Services
rupert2133@gmail.com