Scope and processing roles
NetGuard is a Shopify B2B credit, invoice and receivables application provided by Milan Dhameliya, operating under the Code Kaarigari name. This policy covers the public website, app, buyer invoice experience and support communications. Contact us by email at support@codekaarigari.com.
For buyer and commerce information processed on a merchant’s instructions, the merchant determines the processing purpose and NetGuard acts as a service provider/processor. For our own support, security and business administration, we determine the relevant purposes. Shopify and payment providers have separate privacy policies.
Information obtained through Shopify
Subject to the permissions granted by the merchant, NetGuard processes store identifiers and configuration, B2B company and location records, authorized customer/contact identifiers and contact details, orders and line items, currencies, taxes, payment terms, payment state and app subscription status. We process the information needed for the enabled features, not buyer information for unrelated advertising.
Information supplied or created in NetGuard
Merchants supply credit limits, location allocations, company status, notes, approval preferences, invoice branding, business and buyer-facing contact details, bank/payment instructions, reminder settings and manually recorded payments. The app creates invoices, balances, credit state, activity records, delivery records and operational job records. Support requests contain correspondence, store details and any screenshots you send.
Do not send passwords, access tokens, full card details or unrelated sensitive information to support. Merchants must ensure their notes and uploaded content are necessary and lawful.
Technical information and storage
Hosting and application services process request and operational information to deliver the service, diagnose errors and protect access. Shopify sessions and signed tokens authorize app and buyer access. This public website does not include Google Analytics or an advertising pixel in this release. Documentation search runs in your browser. See our cookie policy for further details.
Purposes and legal bases
We process information to synchronize B2B records; apply merchant-configured credit controls; review orders; create, store and deliver invoices; record and reconcile payments; show receivables and aging; send configured reminders; authorize buyer access; administer subscriptions; support users; and maintain service security.
Where a legal basis is required for processing under our own control, it may include performing our agreement, legitimate interests in operating and protecting the service, legal obligations, or consent where required. Merchants are responsible for the lawful basis and notices for their buyers’ information.
Providers and disclosures
Shopify supplies commerce, identity, APIs and billing. Cloudflare supplies hosting, database, session/cache, file storage and PDF rendering. Resend delivers invoice/reminder email on the merchant’s behalf. Our email service processes correspondence sent to our support address. Intended buyer recipients receive relevant invoices and reminders. Providers process relevant data under their service terms.
We do not sell personal information or share it for cross-context behavioral advertising. We may disclose necessary information to comply with valid legal obligations, protect rights and security, or in a lawful business transfer, subject to applicable protections.
International processing
Providers operate internationally, so information may be processed outside a merchant’s or buyer’s country. We do not promise dedicated regional data residency. Where applicable law requires transfer safeguards or an additional contract, contact us to establish the necessary arrangement before transferring restricted data. This policy is not a signed standard contractual clause or a representation that every transfer mechanism has been executed.
Retention and deletion
Active app records are retained to provide the merchant’s credit, invoice and payment workflows. Uninstalling deactivates the app and clears stored app sessions. Shopify’s shop-redaction request triggers removal of covered shop records and invoice files, subject to reinstall safeguards. Customer-redaction requests remove or scrub personal information through the implemented privacy workflow.
Uninstalling does not mean every provider copy disappears immediately. Processing, backups and provider-managed logs may have separate lifecycles. Support correspondence and billing/dispute records may remain when reasonably needed for the request, security or legal obligations. Contact us for specific retention or deletion questions. Export records you must keep before uninstalling.
Privacy rights and requests
Depending on applicable law, you may have rights to access, correct, delete or obtain a copy of information; restrict or object to processing; withdraw consent; and complain to a competent authority. Buyers should first contact the merchant whose invoice/order is involved. We assist merchants with their requests and handle requests about information under our own control.
Email support@codekaarigari.com with the subject NetGuard privacy request. Identify the relevant store and request without credentials. We may verify identity and authority and ask for necessary information. We respond within applicable legal timelines, subject to lawful exceptions. We do not discriminate for exercising a protected privacy right.
Security and automated controls
Safeguards include authenticated Shopify access, authorization checks, verified webhooks and encryption of stored Shopify access tokens. No online service is completely secure. Automated credit and approval controls follow merchant settings; NetGuard does not independently score creditworthiness, lend funds or guarantee payment. Merchants should give buyers a way to question account restrictions.
Children and policy changes
NetGuard is intended for business merchants and authorized B2B contacts, not as a service directed to children. Contact us if inappropriate children’s information has been supplied. We may update this policy as practices or requirements change. Material changes are communicated where required; the effective date identifies the current version.