Cartful legal

Privacy Policy

How Cartful processes merchant, cart, and store information in order to provide the app.

Last updated: March 15, 2026

Overview

This Privacy Policy explains how Cartful collects, uses, and handles information when merchants install or use the Cartful app and when Cartful processes store and cart data through Shopify.

Cartful is designed to help Shopify merchants create a more branded, conversion-focused cart experience with merchandising controls, market targeting, and cart-specific analytics.

Information we process

Cartful may process merchant, store, cart, order, and app usage information that is needed to provide the service.

  • Store and account information such as shop domain, installation status, authentication session details, and billing status.
  • Cart configuration data such as widget settings, design settings, layout configuration, translation settings, and market targeting rules.
  • Cart analytics and event data such as cart sessions, cart opens, checkout clicks, funnel activity, and related attribution data.
  • Order and billing-related information such as order identifiers, order totals, currency, timestamps, line item information, and webhook payloads delivered by Shopify.
  • Communications and support information when merchants contact Cartful directly.

How we use information

  • To provide, maintain, and improve the Cartful app and related storefront functionality.
  • To store cart layouts, widget settings, and design configuration for merchant carts.
  • To calculate cart-specific analytics such as revenue, orders, conversion rate, funnel metrics, and upsell performance.
  • To manage billing, subscriptions, trials, promotions, and service eligibility.
  • To troubleshoot issues, respond to support requests, and protect the security and reliability of the service.
  • To comply with legal, regulatory, and Shopify platform requirements.

How information is shared

Cartful does not sell merchant or customer personal data. We may share information with service providers and infrastructure partners that help us operate the service, with Shopify when required to provide app functionality, and when disclosure is required by law or to protect the service and its users.

Retention and deletion

Cartful retains data for as long as reasonably necessary to provide the service, maintain merchant cart configuration, support billing and analytics workflows, resolve disputes, and satisfy legal or platform obligations.

If a merchant uninstalls Cartful, store data may be retained for a limited period so that an accidental reinstall can restore the prior state. When Cartful receives Shopify's shop redact request, store data associated with that shop is deleted from Cartful's systems.

Shopify privacy requests

Cartful responds to Shopify privacy and compliance workflows, including requests related to store deletion. Requests relating to customer data may also be submitted through Shopify's required privacy processes or by contacting us directly.

Security

Cartful uses commercially reasonable administrative, technical, and organizational measures to protect information processed through the service. No system can be guaranteed to be completely secure, but we work to limit access, use secure transport, and reduce unauthorized access risk.

Contact

If you have questions about this Privacy Policy or Cartful's handling of data, contact hello@cartful.ca.