1. Who operates PrepayGuard
PrepayGuard is operated by LYP Technologies Private Limited. Questions about this policy or privacy requests can be sent to info@launchurplatform.com.
2. Information the app processes
When a merchant installs or uses PrepayGuard, the app processes the merchant's Shopify shop domain, Shopify OAuth and session information, and the minimum app configuration needed to provide the service.
Shopify stores the app-owned prepaid-only discount metafield and the Payment Customization configuration created for the merchant. At checkout, the Shopify Payment Customization Function receives the applied discount's prepaid-only marker, payment method identifiers and names, and app configuration needed to decide whether configured methods should be hidden.
Partial COD
Partial COD is optional. When a merchant turns it on and grants the additional order, product and fulfillment permissions, PrepayGuard reads the details of orders placed with Partial COD: line items, prices, discounts, taxes, shipping, and the buyer's name, shipping and billing address and phone number. It uses them to create a linked cash-on-delivery order for the balance in the merchant's own Shopify store, to hold the original order so it is not shipped twice, and to copy the balance order's shipment and tracking to the original order. The buyer's contact details are written only into the merchant's Shopify store; they are not stored in the app's database.
For each Partial COD order the app database stores Shopify order and fulfillment IDs, order names, the balance amount and currency, tracking references and processing status. The app also saves the balance on the order in Shopify so the buyer can see it on the Thank you and order status pages, and keeps the storefront settings in an app-owned Shopify field. On the storefront, the app embed reads the cart to show the payment options and records the buyer's choice as a cart attribute.
PrepayGuard does not intentionally collect or store customer payment card numbers, CVV values, bank passwords, or customer payment credentials. It does not intentionally persist customer checkout information received by the Shopify Function. Shopify and payment providers may process payment and checkout information under their own terms as part of operating Shopify checkout.
3. Why information is processed
- Authenticate the merchant and maintain an app session.
- Display and manage the merchant's prepaid-only discount settings.
- Apply the merchant's configured payment-method behavior at checkout.
- For Partial COD: create and track the linked cash-on-delivery order, and show buyers the amount they pay on delivery.
- Secure, operate, troubleshoot, and maintain the app.
- Respond to support, privacy, and legal requests.
4. Service providers and disclosures
PrepayGuard relies on Shopify to provide authentication, Admin API access, app-owned custom data, checkout, and Shopify Functions. The application uses Google Cloud infrastructure, including Cloud Run, and Shopify session records and Partial COD order records are stored in Neon PostgreSQL. These providers process information under their own terms and privacy commitments.
Information may also be disclosed when reasonably necessary to comply with law, protect rights or safety, investigate abuse, or complete a business transfer, subject to applicable legal requirements.
5. Retention and deletion
App session records are retained while needed to operate the installed app and are deleted when Shopify sends a verified app-uninstalled or shop-redaction webhook. Partial COD order records are kept while the app is installed so orders can be completed and audited; they are deleted for a customer's orders on a verified customer-redaction request and for the whole shop on a shop-redaction request. Shopify-hosted configuration and discount markers remain subject to Shopify's platform behavior and the merchant's own settings. The app also provides a merchant-confirmed reset flow for app-owned configuration.
Retention can also be required for security, dispute resolution, or legal compliance. Requests concerning Shopify-held data may need to be directed to Shopify or the relevant merchant.
6. Privacy requests
Shopify sends mandatory customer data request, customer redaction, and shop redaction webhooks to PrepayGuard. The app authenticates those requests before handling them. The app does not store customer profiles. For a verified customer request it matches Partial COD records by the customer's order IDs: a redaction request deletes them, and a data request is answered with the order references and amounts held.
To ask about access, correction, deletion, or another applicable privacy right, contact info@launchurplatform.com and identify the relevant shop. Identity and authority may need to be verified before a request is completed.
7. Security and international processing
Reasonable technical and organizational safeguards are used to protect app information. No method of transmission or storage is completely secure. Shopify, Google Cloud, and Neon may process information in countries other than the merchant's own, subject to their applicable safeguards.
8. Changes and contact
This policy may be updated as the app, service providers, or legal requirements change. The updated date will be shown above.
LYP Technologies Private Limited
Email: info@launchurplatform.com