Privacy Policy

1. Introduction

This privacy policy describes how CartGoals ("we", "our", or "the App") collects, uses, and protects information when you install and use our Shopify application. We are committed to protecting your privacy and complying with all applicable data protection laws, including GDPR.

2. Information We Collect

Merchant Information

When you install our app, we collect and store:

• Your Shopify shop domain (e.g., "yourstore.myshopify.com")
• Shop name and contact email
• Subscription tier (FREE, STANDARD, or PREMIUM)
• Visualizer settings (colors, icons, thresholds, text customizations)
• Session tokens for secure API communication

Customer Information

We do NOT collect, store, or process any individual customer data. This includes:

• Customer names, emails, or addresses
• Purchase history or order details
• Payment information
• Browsing behavior or analytics

Our app only accesses real-time cart data (total price, total weight) during the customer's current browsing session to display cart goal progress. This data is never stored or transmitted to our servers.

3. How We Use Your Information

We use the collected merchant information to:

• Provide and maintain the shipping visualizer functionality
• Manage your subscription and billing
• Display your customized visualizer settings on your storefront
• Provide customer support and respond to inquiries
• Comply with legal obligations and resolve disputes

4. Data Storage and Security

Your data is stored securely in our database hosted on Render.com (US-based infrastructure). We implement industry-standard security measures including:

• Encrypted data transmission (HTTPS/TLS)
• Secure database access controls
• Regular security updates and monitoring
• OAuth 2.0 authentication via Shopify

5. Data Retention

We retain your merchant data for as long as:

• Your app remains installed, OR
• You have an active or past subscription (for billing records)

When you uninstall the app or request data deletion via Shopify's GDPR tools, we will permanently delete all your data within 30 days, except where we are required by law to retain certain billing records.

6. Data Sharing and Third Parties

We do NOT sell, rent, or share your data with third parties for marketing purposes.

We only share data with:

• Shopify: For authentication, billing, and app functionality
• Render.com: Our hosting provider (data processing agreement in place)
• Legal authorities: Only when required by law or to protect our rights

7. Your Rights (GDPR Compliance)

You have the right to:

• Access: Request a copy of your data
• Rectification: Correct inaccurate data (via the app's settings panel)
• Erasure: Request deletion of your data
• Restriction: Limit how we process your data
• Portability: Receive your data in a structured format
• Objection: Object to certain types of data processing

To exercise these rights, you can use Shopify's built-in GDPR tools in your admin panel, or contact us directly at the email address below.

8. GDPR Webhook Compliance

Our app responds to all mandatory Shopify GDPR webhooks:

• customers/data_request: We respond confirming we store no customer data
• customers/redact: We respond confirming we store no customer data
• shop/redact: We permanently delete all merchant data within 48 hours

9. Cookies and Tracking

Our app does not use cookies, tracking pixels, or analytics on your storefront. We only use session tokens required for secure authentication with Shopify's API.

10. Changes to This Policy

We may update this privacy policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. Continued use of the app after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this privacy policy or wish to exercise your data rights, please contact us:

Email: [email protected]
Developer: Sebastian Larsen
App: CartGoals for Shopify