1. Who we are
This Privacy Policy describes how CartChat.ai ("CartChat", "we", "us") collects, uses, and shares information when merchants install and use our Shopify app, and when visitors interact with the CartChat widget on a merchant's storefront.
2. Scope
This policy applies to two contexts:
Merchant app usage
When you install or use CartChat inside Shopify Admin, we process information about your store and your usage of the app to provide the service.
Storefront widget interactions
When a shopper chats with the widget, we process the conversation content to generate responses and to help merchants understand what shoppers are asking.
3. Information we collect
About merchants and stores
Store identifiers (such as shop domain), app settings, plan details, installation and billing status, and information you provide through the admin UI (e.g., greeting text, brand styling, configuration preferences).
Storefront conversation content
Messages a shopper types into the chat widget and our responses. If the merchant enables lead capture, we may also collect contact details the shopper voluntarily provides (such as an email address).
Usage and device data
Technical information to operate and secure the service, such as timestamps, event logs, approximate location derived from IP address (coarse), device/browser information, and performance metrics.
Shopify platform data
Depending on app configuration and permissions, we may access certain Shopify data needed to answer product-related questions (e.g., product catalog details, variant availability, or order status lookups if enabled).
4. How we use information
- Provide the service: operate the chat assistant, generate responses, and show product information relevant to a shopper's questions.
- Maintain and improve: debug, monitor performance, and improve reliability and user experience.
- Security and fraud prevention: protect merchants, shoppers, and CartChat from abuse.
- Analytics: understand aggregate usage to improve the product. We avoid collecting unnecessary personal information in analytics.
- Support and communications: respond to merchant inquiries and provide service-related updates.
5. Legal bases (where applicable)
Where required by applicable law, we process information based on one or more of: providing a service requested by the merchant, legitimate interests (e.g., security and improvement), consent (e.g., optional marketing communications), and compliance with legal obligations.
7. Data retention
We retain data only as long as needed to provide the service, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods may vary depending on merchant settings, subscription status, and operational requirements.
8. Security
We implement reasonable administrative, technical, and organizational safeguards designed to protect information. No method of transmission or storage is 100% secure, but we work hard to protect data against unauthorized access, alteration, disclosure, or destruction.
9. Merchant responsibilities
Merchants are responsible for configuring the app appropriately, publishing storefront disclosures as required by law, and obtaining any necessary consents from shoppers. If you enable lead capture, you should ensure you have a lawful basis to collect and use shopper contact details.
10. International transfers
We may process and store information in countries other than where you live. Where required, we rely on appropriate safeguards for cross-border transfers.
11. Your choices and rights
Depending on your location, you may have rights to access, correct, delete, or object to certain processing. To make a request, contact us at [email protected].
12. Children's privacy
CartChat is not intended for children, and we do not knowingly collect personal information from children.
13. Changes to this policy
We may update this policy from time to time. We will update the effective date above and, if changes are material, we may provide additional notice.
14. Contact
Questions about privacy? Email us at [email protected].