Privacy Policy

Last updated: February 20, 2026

CartLens ("we," "our," or "us") is a Shopify application that provides real-time cart activity insights to Shopify merchants. This Privacy Policy describes how we collect, use, and handle data when you install and use CartLens.

1. Data We Collect

CartLens collects the following data from your Shopify store:

• Cart events — products added to or removed from carts, cart totals, discount codes applied
• Checkout events — when checkout is initiated, items in checkout, order placed confirmation
• Visitor data — anonymous session identifiers, geographic location (city/country), device type, browser, and referrer source
• Customer data (when available) — customer name and email address when a customer is logged in or has entered their email at checkout
• Store data — your Shopify store URL, product names, product images, and variant details associated with cart events

2. How We Use Data

All data collected is used exclusively to provide CartLens functionality to you, the merchant:

• Displaying real-time cart activity in your CartLens dashboard
• Generating analytics reports (conversion funnels, top products, referrer breakdowns)
• Showing session timelines for individual cart journeys

We do not sell, rent, or share your store's data or your customers' data with any third parties for marketing or advertising purposes.

3. Data Storage and Retention

Cart session data is stored in a database associated with your Shopify store installation. Data is retained for a rolling 90-day window. When you uninstall CartLens, your store's data is deleted within 48 hours of receiving the uninstall webhook from Shopify.

4. Data Sharing

We do not sell or share your data with third parties. CartLens does not use any third-party analytics, advertising, or tracking services that receive your store's data.

5. Merchant Responsibilities

As a Shopify merchant using CartLens, you are responsible for ensuring your store's privacy policy discloses to your customers that their cart and browsing behavior may be tracked for analytics purposes. CartLens collects behavioral data from your storefront visitors, including anonymous visitors who have not made a purchase.

6. GDPR

If your store serves customers in the European Economic Area (EEA), you may receive data deletion requests from customers. CartLens supports customer data deletion. To submit a deletion request, contact us at the email below with the customer's email address or Shopify customer ID. We will process the request within 30 days.

7. CCPA

If you are a California resident, you have the right to know what personal data we hold about you and to request deletion. CartLens does not sell personal information. To exercise your rights, contact us at the email below.

8. Security

We use industry-standard practices to protect data in transit and at rest, including HTTPS encryption for all data transmission. Access to stored data is restricted to authorized systems only.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of CartLens after changes constitutes acceptance of the updated policy.

10. Contact

For privacy-related questions or data requests, contact us at:
support@cartlensapp.com