Privacy Policy

1. Overview

Cart Rocket is a Shopify app that allows merchants to create pre-loaded cart links with products, discounts, purchase limits, and campaign tracking.

We collect only the data necessary to operate and improve the Service.

We do not sell personal data.

2. Information We Collect

Cart Rocket collects information in the following categories:

2.1 Store Information (From Shopify)

When you install the app, we receive limited store data via Shopify’s secure API, including:

• Store name
• Store domain
• Store email
• Shopify store ID
• Plan type
• Timezone

This data is required to operate the Service.

2.2 Preset & Campaign Configuration Data

We store data you create inside Cart Rocket, including:

• Cart presets
• Selected products
• Variant selections
• Quantities
• Discount configurations
• Purchase limits
• UTM parameters
• Scheduling data

This data is necessary to generate cart links and enforce rules.

2.3 Order & Attribution Data

To provide analytics, we may access:

• Order ID
• Order total
• Order date
• Order attributes (including UTM parameters)
• Preset usage markers

We do not access full customer payment information. We do not store credit card data.

2.4 Limited Customer Information

Cart Rocket does not intentionally collect or store sensitive personal customer information.

In cases where purchase limits require login verification, we may access:

• Shopify customer ID
• Customer email (for limit enforcement only)

We do not sell or use customer data for marketing purposes.

2.5 Usage Data

We may collect anonymous usage data such as:

• Feature usage
• Preset creation activity
• Error logs
• App performance metrics

This helps us improve reliability and features.

3. How We Use Information

We use collected data to:

• Generate cart presets
• Enforce purchase limits
• Apply discount logic
• Track campaign performance
• Provide analytics dashboards
• Improve app performance
• Provide support

We do not use merchant or customer data for advertising or resale.

4. Data Sharing

We do not sell personal data.

We only share data with:

• Shopify (as required to operate the app)
• Infrastructure providers (hosting, database, analytics)
• Legal authorities if required by law

All service providers are required to maintain data confidentiality.

5. Data Storage & Security

We implement reasonable technical and organizational safeguards to protect data.

Security measures include:

• Encrypted API communication (HTTPS)
• Secure hosting environments
• Limited internal access
• Authentication controls

However, no system can guarantee absolute security.

6. Data Retention

We retain data:

• While the app is installed
• As necessary to provide analytics
• As required for legal obligations

If you uninstall Cart Rocket, your preset data may be deleted within a reasonable period unless required for compliance.

To request data deletion, contact: hello@cartrocket.dev

7. GDPR & Data Protection (For EU Users)

If you are located in the European Economic Area (EEA), you have rights including:

• Right to access your data
• Right to correction
• Right to deletion
• Right to restrict processing
• Right to data portability
• Right to object to processing

To exercise these rights, contact: hello@cartrocket.dev

Cart Rocket acts as a data processor for Shopify merchants. Merchants remain the data controller for their customer data.

8. California Privacy Rights (CCPA)

If you are a California resident, you may have rights under the CCPA, including:

• Right to know what data is collected
• Right to request deletion
• Right to opt out of data sale

Cart Rocket does not sell personal information.

9. Third-Party Services

Cart Rocket integrates with:

• Shopify APIs
• Hosting providers
• Analytics infrastructure (if applicable)

We are not responsible for the privacy practices of Shopify or other third-party services. You should review Shopify’s Privacy Policy separately.

10. Cookies & Tracking

The Cart Rocket app itself does not place cookies on end customers’ browsers.

This website (cartrocket.dev) uses cookies grouped into the following categories. When you first visit, a consent banner lets you accept all, reject all, or choose per category via “Save preferences”. Non-essential cookies are only set after you opt in.

• Strictly necessary — required for the site to function, including storing your cookie consent choice. These cannot be disabled.
• Analytics & performance — Google Analytics cookies that help us understand how visitors use the site. IP addresses are anonymized. Only set if you opt in.
• Functional — enable enhanced features and personalization. Only set if you opt in.
• Marketing & advertising — used to deliver relevant ads and measure marketing campaigns. Only set if you opt in.

You can change your preferences at any time via the Cookie preferences link in the site footer, or by clearing this site’s data in your browser, which resets your consent choice. For details on how Google processes data, see Google’s Privacy Policy.

Merchants may separately use UTM parameters, Shopify analytics, and third-party ad tracking tools. Cart Rocket does not control those systems.

11. Children’s Privacy

Cart Rocket is not intended for individuals under the age of 18. We do not knowingly collect personal data from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with a revised “Last updated” date. Continued use of the Service constitutes acceptance of updates.

13. Contact Information

If you have questions regarding this Privacy Policy, please contact:

Cart Rocket
Email: hello@cartrocket.dev