Privacy Policy

1. Introduction

Cartalyst ("we", "our", "us") is a Shopify cart intelligence app that helps merchants identify products leaking revenue. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you install and use our Shopify app and visit our website.

By installing Cartalyst on your Shopify store, you agree to the practices described in this policy. If you do not agree, please do not install the app.

2. Information We Collect

2.1 Shopify Store Information

When you install Cartalyst, we collect the following from your Shopify store via the Shopify Admin API:

• Store name, domain, and Shopify store ID
• Store currency and timezone settings
• Product catalogue information (product IDs, titles, variants, prices)
• Order information (product IDs, quantities, order status) only for the purpose of comparing cart intent against completed purchases

2.2 Web Pixel Event Data

Through the Shopify Web Pixel, we collect anonymised, aggregate-level event data:

• Product added to cart (product ID, timestamp, quantity)
• Product removed from cart (product ID, timestamp)
• Storefront search queries (search term text, timestamp, result count)
• Checkout initiation events (product IDs, timestamp)

We do not collect: customer names, email addresses, phone numbers, shipping addresses, payment information, IP addresses, or any personally identifiable information (PII). All Web Pixel events are processed at the product level, not the customer level.

2.3 Website Usage Data

When you visit our website, we may collect basic analytics data (pages visited, referring site, browser type) through standard web analytics tools. We do not use cookies for tracking purposes beyond what is necessary for basic site functionality.

3. How We Use Your Information

We use the collected information solely to:

• Generate aggregate product-level cart leak reports
• Compare cart intent signals against completed orders
• Identify search terms with no matching products
• Detect frequently bundled product pairs
• Improve and maintain the app's functionality
• Communicate product updates and support messages

We do not sell, rent, or share your store data with third parties for their marketing purposes. We do not use customer data for training AI or machine learning models outside of the specific reporting features described in this policy.

4. Data Storage and Security

Data is stored securely on encrypted servers. We implement commercially reasonable technical and organisational measures to protect your data against unauthorised access, alteration, disclosure, or destruction.

Shopify Web Pixel event data is retained for a rolling period sufficient to generate meaningful reports (currently 90 days). Older data is automatically purged. Order data is retained for the duration of your subscription and deleted within 30 days of app uninstallation.

5. Data Sharing and Disclosure

We may share your information only in the following circumstances:

• With Shopify: as required by the Shopify App Store terms and the Shopify Web Pixel API agreement
• With service providers: who process data on our behalf (e.g., cloud hosting, database infrastructure) under contractual data processing agreements
• As required by law: to comply with a legal obligation, court order, or governmental request

6. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the data we hold about your store
• Request deletion of your data (uninstalling the app triggers automatic deletion)
• Object to or restrict processing of your data
• Data portability

To exercise any of these rights, contact us at cartalyst@devhoop.eu.

7. Third-Party Services

Cartalyst operates exclusively within the Shopify ecosystem. Our data processing infrastructure is hosted by trusted cloud providers that maintain industry-standard security certifications. We do not integrate with advertising networks, data brokers, or third-party analytics platforms that would receive your store data.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the Shopify App Store listing or by email to the store owner contact information provided during installation. Continued use of the app after changes constitutes acceptance of the updated policy.

9. Contact

If you have questions, concerns, or requests regarding this Privacy Policy, please contact us at:

Email: cartalyst@devhoop.eu