Privacy Policy

1. Introduction

CartAgents ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered Shopify automation platform. We comply with applicable privacy laws including GDPR, CCPA, and Shopify's privacy requirements.

2. Information We Collect

2.1 Information You Provide

• Account information (name, email address, company details)
• Shopify store connection data
• Billing and payment information
• Support communications and feedback

2.2 Shopify Store Data

Through our Shopify integration, we access and process:

• Product information, inventory levels, and pricing
• Order data and customer information
• Store analytics and performance metrics
• Marketing and promotional data
• App configuration and settings

2.3 Automatically Collected Information

• Usage data and application logs
• Device information and IP addresses
• Cookies and similar tracking technologies
• Performance and error analytics

3. How We Use Your Information

3.1 Service Provision

• Operating and maintaining our AI automation platform
• Processing and analyzing your store data with AI agents
• Providing personalized automation recommendations
• Generating reports and insights

3.2 Platform Improvement

• Training and improving our AI models
• Developing new features and capabilities
• Analyzing usage patterns to enhance user experience

3.3 Communication and Support

• Providing customer support and technical assistance
• Sending service updates and security notifications
• Marketing communications (with your consent)

4. AI and Machine Learning

Our AI agents use machine learning algorithms to analyze your store data and provide automation services. We may use aggregated and anonymized data to train and improve our AI models. We implement appropriate safeguards to protect your data during AI processing and ensure compliance with applicable AI governance requirements.

5. Data Sharing and Disclosure

5.1 Third-Party Service Providers

We may share your information with trusted service providers who assist us in operating our platform:

• Cloud hosting and infrastructure providers
• Payment processors
• Analytics and monitoring services
• Customer support platforms

5.2 Shopify Integration

Our integration with Shopify involves data exchange in accordance with Shopify's API Terms and Partner Agreement. We only access data necessary for providing our services.

5.3 Legal Requirements

We may disclose your information when required by law, court order, or to protect our rights and the safety of our users.

6. Data Security

We implement industry-standard security measures to protect your data:

• Encryption in transit and at rest
• Access controls and authentication
• Regular security audits and monitoring
• Compliance with SOC 2 Type II standards
• Employee training on data protection

7. Data Retention

We retain your data only as long as necessary to provide our services and comply with legal obligations. If you uninstall the app from Shopify, all associated account data is deleted immediately. For closed accounts not uninstalled directly, data is typically deleted within 15 days of closure. Aggregated and anonymized data may be retained indefinitely for service improvement purposes.

8. Your Privacy Rights

8.1 General Rights

Depending on your location, you may have the following rights:

• Access to your personal data
• Correction of inaccurate data
• Deletion of your data
• Data portability
• Objection to processing
• Restriction of processing

8.2 GDPR Rights (EU Users)

EU users have additional rights under GDPR, including the right to lodge a complaint with supervisory authorities.

8.3 CCPA Rights (California Users)

California residents have rights under CCPA including the right to know about personal information collection and sale practices.

9. Cookies and Tracking

We use cookies and similar technologies to:

• Maintain your login session
• Remember your preferences
• Analyze platform usage
• Provide personalized experiences

You can manage cookie preferences through your browser settings.

10. International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, including Standard Contractual Clauses and adequacy decisions where applicable.

11. Children's Privacy

Our services are not intended for individuals under 18. We do not knowingly collect personal information from children. If we become aware of such collection, we will delete the information promptly.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notification at least 30 days before taking effect. Continued use of our services indicates acceptance of the updated policy.

13. Contact Us

For questions about this Privacy Policy or to exercise your privacy rights, please contact us: