Privacy Policy

CartSpy ("the App") provides ability to view customer activity ("the Service") to merchants who use Shopify to power their stores. This Privacy Policy describes how personal information is collected, used, and shared when you install or use the App in connection with your Shopify-supported store.

Personal Information the App Collects

When you install the App, we are automatically able to access certain types of information from your Shopify account.

When you follow the review link in a CartSpy daily report, we record that it was clicked, for your store and that report's date, so we can count how often the link is used; we do not record who clicked it.

How Do We Use Your Personal Information?

We use the personal information we collect from you and your customers in order to provide the Service and to operate the App. Additionally, we use this personal information to: Communicate with you; Optimize or improve the App; and provide you with information or advertising relating to our products or services.

If a merchant connects an AI assistant (Shopify Sidekick, Claude, ChatGPT or another AI assistant) to the App, we log the shop, which tool was called, its parameters with anything resembling an email, phone number or name stripped out, and basic technical metadata (status, timing, response size) - never the assistant conversation or question itself - and keep this log until the store's own data is deleted after uninstall.

Sharing Your Personal Information

We may share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.

AI summary in the daily report. If you receive CartSpy's daily report email, it can include a short summary of the day written by AI. It is on by default and you can switch it off at any time in the App's Settings ("AI summary in the daily report"). To write it, we send that day's aggregated store figures to OpenAI, L.L.C. (United States), which acts as our sub-processor: totals such as visitors, carts, checkouts, orders and revenue, the names of your most viewed and best-selling products and of products left in carts, your store name, currency and the report date. We do not send any customer personal information (no names, email addresses, phone numbers, postal or IP addresses, or anything else that identifies a shopper). OpenAI processes this data only to return the summary, under its API terms, which do not allow it to use the data to train its models. When the summary is switched off, nothing is sent to OpenAI for this purpose.

CartSpy may also ask Happy Bundle, another app made by the same company, whether Happy Bundle is installed on your store, so that CartSpy can link to it - no other information about your store, orders or customers is shared with Happy Bundle for this purpose.

Analytics Cookies on This Website

This website (cartspy.app) uses Google Analytics 4. Whether it asks you first depends on where you are, which the site works out inside your browser from your device's time zone setting; nothing is sent anywhere to decide this. In the European Union, the European Economic Area, the United Kingdom and Switzerland, and whenever the time zone is unknown, Google Analytics is used only if you choose "Accept" in the cookie banner: until you choose, and if you choose "Decline", no analytics script is loaded and no analytics cookie is set. Elsewhere, Google Analytics is on from your first page view, and you can switch it off at any time. Your choice is kept in your browser's local storage for 12 months so we do not ask on every page; it is not a cookie and is not sent to us.

When Google Analytics is on, it sets two first-party cookies (_ga and _ga_ followed by an ID) that hold a random identifier and expire after 13 months. They let us count visits and see which pages are viewed, which site or campaign link brought the visit, whether the install buttons, the language switcher and the product video were used, and the type of device and browser and the country and region the visit came from. Google Analytics 4 does not log or store IP addresses. Google signals, advertising features and ad personalization are switched off, and analytics data is kept for 14 months.

Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) provides Google Analytics as our processor; data may be transferred to Google LLC in the United States under the EU-U.S. Data Privacy Framework and Google's standard contractual clauses. In the EU, the EEA, the UK and Switzerland the legal basis is your consent (Article 6(1)(a) GDPR); elsewhere it is our legitimate interest in understanding how our website is used. You can withdraw your consent, or switch analytics off, at any time with "Cookie settings" at the bottom of every page: choosing "Decline" there stops Google Analytics and deletes its cookies from this site.

This concerns visitors to this website only. The CartSpy app in your Shopify admin does not use Google Analytics.

Your Rights

If you are a European resident, you have the right to access personal information we hold about you and to ask that your personal information be corrected, updated, or deleted. If you would like to exercise this right, please contact us through the contact information below.

Additionally, if you are a European resident we note that we are processing your information in order to fulfill contracts we might have with you (for example if you make an order through the Site), or otherwise to pursue our legitimate business interests listed above. Additionally, please note that your information will be transferred outside of Europe, including to Canada and the United States.

Changes

We may update this privacy policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons.

Contact Us

For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e-mail at support@cartspy.app