Email Consent Policy

1. Our Commitment to Consent-Based Email Marketing

CartAgents is committed to responsible email marketing practices. We only send marketing emails to recipients who have explicitly provided consent to receive communications from us. This policy outlines how we obtain, manage, and honor email consent in compliance with international email marketing laws and regulations.

2. How We Obtain Email Consent

2.1 Shopify Store Customer Opt-ins

We primarily obtain email consent through our integration with Shopify stores. Customers provide consent through:

• Checkout Process: Customers can opt-in to receive marketing emails during the checkout process on Shopify stores using CartAgents
• Newsletter Subscriptions: Customers voluntarily subscribe to newsletters through forms on Shopify store websites
• Account Registration: New customers can opt-in when creating accounts on Shopify stores
• Customer Preferences: Existing customers can update their email preferences in their account settings

2.2 Double Opt-in Confirmation

Where required by law or best practices, we implement double opt-in confirmation:

• Initial opt-in is recorded when customer provides consent
• Confirmation email is sent to verify the email address
• Marketing emails only begin after email verification is complete
• All opt-in timestamps and sources are recorded for compliance

3. Types of Consent We Collect

3.1 Express Consent

We collect express consent through clearly marked checkboxes or buttons where customers actively choose to opt-in to:

• Marketing and promotional emails
• Product updates and new feature announcements
• AI automation tips and e-commerce insights
• Special offers and discounts

3.2 Transactional Email Communications

We send transactional emails without additional consent as they are necessary for service provision:

• Account setup and welcome messages
• Service notifications and system updates
• Billing and payment confirmations
• Security alerts and password resets
• Support ticket responses and resolution updates

4. Consent Management and Record Keeping

4.1 Consent Documentation

For each email consent, we maintain detailed records including:

• Consent Source: The specific Shopify store and page where consent was obtained
• Timestamp: Exact date and time when consent was provided
• IP Address: Customer's IP address at time of consent
• Consent Method: How consent was obtained (checkout, newsletter signup, etc.)
• Consent Language: The exact text presented to the customer
• Customer Identifier: Shopify customer ID and email address

4.2 Consent Withdrawal Tracking

We track all consent withdrawal requests with the same level of detail, including unsubscribe method, timestamp, and processing confirmation.

5. Email Content and Frequency

5.1 Marketing Email Content

Our marketing emails contain relevant, valuable content for Shopify store owners:

• AI automation strategies for e-commerce growth
• Product updates and new AI agent capabilities
• Industry insights and e-commerce trends
• Best practices for store optimization
• Exclusive offers and early access to new features

5.2 Email Frequency

We respect our subscribers' inboxes with reasonable email frequency:

• Weekly Newsletter: Maximum of one newsletter per week
• Product Updates: As needed for significant feature releases
• Promotional Emails: Maximum of 2-3 promotional emails per month
• Educational Content: 1-2 educational emails per month

6. Unsubscribe and Preference Management

6.1 Easy Unsubscribe Process

Every marketing email includes clear, prominent unsubscribe options:

• One-click unsubscribe link in email footer
• Direct unsubscribe page at /unsubscribe
• Email reply with "UNSUBSCRIBE" keyword support
• Contact information for manual unsubscribe requests

6.2 Processing Unsubscribe Requests

We process all unsubscribe requests immediately and automatically. Unsubscribed users are removed from marketing lists within minutes and will not receive further marketing communications.

7. Data Protection and Security

We protect email subscriber data with enterprise-grade security:

• Encryption: All subscriber data is encrypted in transit and at rest
• Access Controls: Limited access to subscriber data on need-to-know basis
• Regular Audits: Periodic security audits and compliance reviews
• Data Minimization: We only collect and retain necessary subscriber information
• Breach Response: Immediate notification procedures for any data incidents

8. Third-Party Email Service Providers

CartAgents uses Amazon SES (Simple Email Service) for email delivery. We ensure our email service providers:

• Maintain appropriate data protection and privacy standards
• Comply with international email marketing regulations
• Provide necessary tools for consent management and unsubscribe handling
• Support proper authentication and deliverability practices

All subscriber data shared with email service providers is governed by data processing agreements that ensure the same level of protection and compliance standards.

9. Compliance with Email Marketing Laws

9.1 International Compliance

Our email practices comply with major international email marketing regulations:

• GDPR (EU): Lawful basis for processing, consent documentation, right to withdraw
• CAN-SPAM Act (USA): Clear sender identification, honest subject lines, unsubscribe options
• CASL (Canada): Express consent requirements, clear identification, unsubscribe mechanisms
• Privacy Act (Australia): Consent and disclosure requirements

9.2 Sender Authentication

We implement proper email authentication protocols including SPF, DKIM, and DMARC to ensure email deliverability and prevent spoofing.

10. Regular Review and Updates

We regularly review and update our email consent practices to ensure continued compliance with evolving regulations and industry best practices. This policy is updated as needed to reflect changes in our procedures or applicable laws.

11. Contact Information for Email Consent Questions

For questions about email consent, to request consent records, or to report issues with our email practices, please contact us: