CartSuite Privacy Policy

Last updated: September 25, 2026

Agreement

This policy is the data protection agreement between CartSuite and the merchant. Installing the app constitutes acceptance. It governs how CartSuite processes store data on the merchant's behalf, and it is available at this address at all times.

Summary

CartSuite is built to know as little as possible. We never read, request or store customer names, email addresses, phone numbers, shipping or billing addresses, IP addresses or payment details. We do not use any store data for advertising, marketing or profiling, and we never sell or share it.

What we read from orders

When an order is created, Shopify sends us the order webhook. We read a fixed, minimal set of fields and discard the rest of the payload without writing it anywhere:

• Whether the order is a test order or a point-of-sale order, so those are excluded.
• The cart attributes CartSuite itself wrote: _cs_seen, _cs_goal, _cartsuite_assisted.
• The line item properties CartSuite itself wrote: _cs_src and _cs_rule, which mark a line as coming from a recommendation, add-on, gift, bundle or the sticky cart.
• For those marked lines only: product id, product title, unit price, quantity and line discount. Plus the order subtotal.

These values are added into daily totals immediately: orders per month, revenue added per feature, and units per product. The raw order is never written to disk, and no order can be reconstructed from what we keep.

What else we store

• Merchant configuration. The settings, campaigns, upsell rules, bundles and quantity breaks you create in the app.
• Store owner contact. The store name, the owner's name and the owner's email address as Shopify provides them, used only to send at most three setup emails in the first ten days (a welcome, a reminder if the app is not switched on yet, and a first-week summary). Every email has an unsubscribe link, and we never use this address for anything else.
• Aggregate storefront metrics. Anonymous daily counters such as drawer opens, add-to-carts and checkout clicks, sent through Shopify's signed app proxy. No cookies, no IP storage, no per-visitor tracking, no cross-site identifiers.

Where it lives

Data is held in our application database, hosted on Railway, encrypted at rest by the provider and reached only over TLS. Webhooks are verified by HMAC signature. Your configuration is also written to a Shopify app-owned metafield so your storefront never calls our servers for it.

Who else sees it

Nobody. We use no analytics, advertising or data-broker services. Our subprocessors are Railway, as the hosting provider, and Brevo, which delivers the setup emails and receives only the owner's email address and the message itself. Access to production is limited to the developer account, protected by two-factor authentication.

How long we keep it

Aggregate counters and your configuration are kept for as long as the app is installed. On uninstall your configuration is deleted immediately, and Shopify removes the app-owned metafield automatically.

Data removal and requests

• We honour Shopify's mandatory webhooks. customers/data_request and customers/redact return without action, because we hold no customer data to return or erase.
• shop/redact erases everything we hold about the store, including the owner's contact details, email history, usage counters, campaigns, rules and aggregate metrics.
• You can request deletion at any time by writing to the address below, and we will confirm within 30 days.

Security incidents

If we become aware of a breach affecting store data, we notify the affected merchants and Shopify within 72 hours of detection.

Changes

If this policy changes we update the date above. Material changes are announced inside the app.

Contact

Questions or requests: info@esldekor.com