1. Introduction
Welcome to CartSell ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Shopify popup upsell application (the "App"). Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the App.
2. Information We Collect
2.1 Information You Provide
We collect information that you voluntarily provide when you:
- Install and configure the App on your Shopify store
- Create and customize popup campaigns
- Contact our customer support team
- Subscribe to our newsletters or marketing communications
This information may include your name, email address, store URL, business information, and payment details.
2.2 Automatically Collected Information
When you use the App, we automatically collect certain information about your device and usage, including:
- Store analytics data (page views, sessions, conversion rates)
- Customer behavior data (browsing patterns, cart activity, purchase history)
- Technical information (IP address, browser type, device information)
- App usage data (features used, settings configured, popup performance)
- Log data and error reports
2.3 Customer Data
To provide our popup upsell functionality, we process information about your store's customers, including:
- Shopping behavior and preferences
- Cart contents and product views
- Device and browser information
- Geographic location (country/region level)
We act as a data processor for this customer data, and you remain the data controller responsible for obtaining appropriate consent from your customers.
3. How We Use Your Information
We use the information we collect to:
- Provide and maintain the App: Deliver popup upsell functionality, AI recommendations, and analytics
- Improve our services: Analyze usage patterns, optimize performance, and develop new features
- Personalize your experience: Customize popups and recommendations based on customer behavior
- Communicate with you: Send important updates, technical notices, and support responses
- Ensure security: Detect and prevent fraud, abuse, and security incidents
- Comply with legal obligations: Respond to legal requests and enforce our terms
- Marketing: Send promotional content (with your consent, and you may opt out at any time)
4. How We Share Your Information
We may share your information in the following circumstances:
4.1 Service Providers
We work with third-party service providers who perform services on our behalf, including:
- Cloud hosting and storage providers
- Analytics and performance monitoring services
- Payment processors
- Customer support platforms
- Email and communication services
These providers are contractually obligated to protect your data and use it only for the purposes we specify.
4.2 Shopify
As a Shopify app, we integrate with Shopify's platform and may share necessary data to provide our services. Please review Shopify's privacy policy for information on how they handle your data.
4.3 Legal Requirements
We may disclose your information if required by law, court order, or governmental regulation, or if we believe disclosure is necessary to:
- Comply with legal obligations
- Protect our rights, property, or safety
- Prevent fraud or security issues
- Respond to emergencies
4.4 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.
5. Data Security
We implement appropriate technical and organizational security measures to protect your information, including:
- Encryption of data in transit and at rest
- Regular security assessments and audits
- Access controls and authentication requirements
- Employee training on data protection
- Incident response procedures
However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
6. Data Retention
We retain your information for as long as necessary to:
- Provide our services and maintain your account
- Comply with legal, tax, and accounting obligations
- Resolve disputes and enforce our agreements
When you uninstall the App, we will delete or anonymize your data within 90 days unless we are required to retain it for legal purposes. You may request earlier deletion by contacting us.
7. Your Privacy Rights
Depending on your location, you may have the following rights:
- Access: Request a copy of the personal information we hold about you
- Correction: Request correction of inaccurate or incomplete information
- Deletion: Request deletion of your personal information
- Portability: Request a copy of your data in a machine-readable format
- Objection: Object to certain processing activities
- Restriction: Request restriction of processing in certain circumstances
- Withdraw consent: Withdraw consent where we rely on consent as the legal basis
To exercise these rights, please contact us at privacy@cartsell.in. We will respond within 30 days.
8. International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place through:
- Standard contractual clauses approved by regulatory authorities
- Service providers certified under recognized frameworks
- Other legally approved transfer mechanisms
9. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to:
- Enable core functionality of the App
- Analyze usage and performance
- Remember your preferences and settings
- Personalize popup displays
You can control cookies through your browser settings. However, disabling cookies may affect the functionality of the App.
10. Children's Privacy
The App is not intended for users under the age of 16. We do not knowingly collect personal information from children. If we discover that we have collected information from a child, we will delete it promptly.
11. Third-Party Links
The App may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.
12. California Privacy Rights
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including:
- Right to know what personal information is collected, used, and shared
- Right to delete personal information
- Right to opt-out of the sale of personal information (we do not sell your information)
- Right to non-discrimination for exercising your privacy rights
13. GDPR Compliance (European Users)
If you are located in the European Economic Area (EEA), UK, or Switzerland, we process your data based on the following legal grounds:
- Contract performance: To provide the App services you've requested
- Legitimate interests: To improve our services and ensure security
- Legal compliance: To comply with applicable laws and regulations
- Consent: For marketing communications and optional features
You have the right to lodge a complaint with your local data protection authority.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by:
- Posting the updated policy on this page
- Updating the "Last Updated" date
- Sending an email notification (for significant changes)
Your continued use of the App after changes constitutes acceptance of the updated policy.
15. Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact us:
- Support: contact@cartsell.in
16. Your Responsibilities
As a merchant using CartSell, you are responsible for:
- Obtaining appropriate consent from your customers for data collection
- Providing clear privacy notices to your customers
- Complying with applicable privacy laws in your jurisdiction
- Handling customer privacy requests regarding data collected through your store
CartSell provides tools to help you comply with privacy regulations, but ultimate responsibility for compliance rests with you as the merchant.