Privacy Policy

Information from your Shopify store

When a merchant installs our Shopify app, we receive:

• Store details — store name, domain, contact email, currency, and owner name, provided by Shopify as part of the standard app-installation process.
• Order and customer data — for each Cash-on-Delivery order, the customer's name, phone number, email, and shipping address, plus order and line-item details. This is used for one purpose only: placing the automated verification call and recording its outcome.

Information you send us directly

• Support communications — messages, support requests, or feedback sent to our team.

Information collected automatically

• Server logs — our hosting infrastructure automatically records standard technical details, such as IP address and request timestamps, for security and operational purposes.

Information from third parties

• Shopify — order, customer, and store data, retrieved via the Shopify Admin API using the permissions the merchant grants at install.
• Our telephony provider — after we send a customer's phone number and call script to place the verification call, our provider returns the call outcome: whether it was answered, the keypress the customer pressed (confirm or cancel), and call duration.

We use the information above to:

• Place an automated phone call asking the customer to confirm or cancel their Cash-on-Delivery order
• Update the corresponding order's status and tags in the merchant's Shopify store based on the call outcome
• Provide the merchant-facing dashboard showing call history, order status, and billing balance
• Help merchants identify non-genuine or unlikely-to-be-fulfilled Cash-on-Delivery orders
• Respond to support requests
• Comply with applicable legal obligations

We do not use personal data for advertising or marketing purposes, and we do not sell it.

We do not sell, rent, or trade personal data. We share it only in these circumstances:

With the merchant

If you are a customer of a Shopify store using ScaleIVR, your order and contact details are processed on that merchant's behalf, and the outcome of the verification call is written back to their store as an order tag or, if declined, an order cancellation.

With our telephony provider

Your phone number and a generated call script are shared with our third-party voice-call provider solely to place the verification call and report its outcome back to us.

With service providers

Infrastructure providers who host our application and database operate under contract and process data only to provide that hosting — never for their own purposes.

Legal requirements

We may disclose information if required by law, court order, or government request, or to protect the rights and safety of Scalecore and its users.

Business transfers

In the event of a merger, acquisition, or sale of assets, your data may be transferred. We will notify you of any such change.

We have not undergone a formal third-party security audit or certification at this time.

Data retention

We retain order and call-verification data for as long as the app remains installed on a merchant's store, and may retain it for a reasonable period afterward for legitimate business, legal, or accounting purposes. You may request deletion of your data at any time by contacting support@scalewiz.com, and we will act on that request unless we are required by law to retain the data.

Our Shopify app authenticates every request using Shopify's own session tokens rather than cookies, and does not set advertising or tracking cookies. Our website at scalewiz.com may use essential cookies required for basic site functionality.

• Shopify — order, customer, and store data via the Shopify Admin API. See Shopify's Privacy Policy.
• Telephony / IVR provider — places the automated verification call on our behalf and reports its outcome.
• Hosting & database providers — store and run the Services on our behalf.

Depending on your location (GDPR, CCPA, India's DPDP Act), you may have the right to:

• Access your personal data
• Correct inaccurate or incomplete data
• Delete your data, subject to legal exceptions
• Receive your data in a machine-readable format (portability)
• Restrict processing under certain circumstances
• Object to certain processing
• Withdraw consent where processing is consent-based

To exercise any of these rights, contact us at support@scalewiz.com. We aim to respond within 30 days.

Our Services are not directed at individuals under 18, and we do not knowingly collect data from minors. If you believe a child has provided us with personal information, contact us immediately at support@scalewiz.com.

ScaleIVR is operated by Scalecore, based in India. If you access our Services from outside India, your data may be transferred to and processed in India. Where required by applicable law, we apply appropriate safeguards to such transfers.

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify merchants directly. Continued use of our Services after a change constitutes acceptance of the updated policy.