Compliance check: COD lead-form widget — popup confirmation, no Checkout redirect

My app is a Cash on Delivery (COD) helper. It shows a small storefront modal to capture a lead and confirm via popup. Based on our current implementation:

Storefront does not redirect to Checkout; we show a “Request received” popup.
The storefront makes no Admin API calls.
Submit hits our Supabase Edge Function.
In review mode (currently enabled), we only store a lead and show the popup — no Shopify order/draft is created.
Outside review mode, the server creates a Shopify Draft Order (for merchant follow‑up), never a final paid order, and we don’t change any payment state.

Questions:

Is this flow fully compliant with App Store and Checkout policies?
Is it acceptable to create a Draft Order server‑side from an offsite lead, or should we keep review mode (lead‑only, no draft) for approval?
Any wording/UI guidance for the popup to avoid implying a completed order?
Thank you — I want to ensure we’re on the right path before resubmitting.

Hi @Oussama_echahid

Just to clarify - would orders be processed on the native Shopify checkout in this flow?