Privacy Policy for CartSync

Last Updated: January 15, 2025

Introduction

CartSync ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Shopify app, CartSync.

Information We Collect

Data Collected from Shopify Stores

When you install CartSync on your Shopify store, we collect the following information:

1. Abandoned Checkout Data

Customer email addresses
Product information (titles, prices, images, variants)
Cart values and quantities
Checkout timestamps
Customer names (if available)

2. Product View Data

Product IDs, titles, and handles
Product prices and images
Variant information
Collection and tag data
View timestamps

3. Cart Activity Data

Add to cart events
Remove from cart events
Cart contents and values
Activity timestamps

4. Store Information

Shop domain
Shopify access tokens (encrypted)
App installation date

Data Collected from Merchants

When you use CartSync as a merchant, we collect:

Your Klaviyo API key (stored securely, used only for syncing data)
App usage statistics
Support communications

How We Use Your Information

We use the collected information to:

Sync Data to Klaviyo: Automatically sync abandoned checkout data, product views, and cart activity to your Klaviyo account for email marketing campaigns.
Provide App Functionality: Enable features such as:
- Real-time cart abandonment tracking
- Product view tracking
- Cart activity monitoring
- Historical data synchronization
- Analytics and reporting
Improve Our Service: Analyze usage patterns to improve app performance and features.
Compliance: Comply with legal obligations and respond to data requests.

Data Sharing

Third-Party Services

Klaviyo: We share customer data (emails, cart information, product views) with Klaviyo based on your configuration. This data is used solely for email marketing campaigns you create in Klaviyo. Klaviyo's privacy policy applies to data stored in their platform: https://www.klaviyo.com/legal/privacy

Shopify: We receive data from Shopify through webhooks and API access. Shopify's privacy policy applies:

Your Rights

For Merchants

Access: Request a copy of all data we have about your store
Deletion: Request deletion of all your store's data
Correction: Update incorrect information
Export: Export your data in a portable format

For Customers (via Merchant)

If you are a customer of a store using CartSync, you can:

Request access to your data through the store owner
Request data deletion through the store owner
Opt out of email marketing through Klaviyo unsubscribe links

GDPR and CCPA Compliance

GDPR (European Union)

We comply with GDPR requirements:

Right to Access: We provide customer data upon request
Right to Erasure: We delete customer data upon request
Data Portability: We provide data in a portable format
Lawful Basis: We process data based on legitimate interest (providing app functionality)