Privacy Policy
Last updated: 2026-05-20
1. Who we are
Cart Recovery AI ("we", "us") provides an abandoned-cart recovery service for Shopify merchants. We process data on behalf of merchants who install our Shopify app.
2. Data we collect
From the merchant's Shopify store, after installation:
- Store metadata: shop domain, store name, currency, timezone.
- Abandoned checkout data: cart line items, totals, abandoned-at timestamp.
- Customer contact data: email address and (where the customer consented at checkout) phone number, first name, last name.
- Order data: order ID, status, total, completion time.
We do not collect payment card numbers, CVVs, or full billing addresses.
3. How we use it
- Send personalised recovery messages (email and SMS, where the customer opted in) on the merchant's behalf.
- Compute recovery analytics for the merchant dashboard.
- Improve message personalisation via aggregated, de-identified data.
We never sell personal data and never use it to market unrelated products to a merchant's customers.
4. AI processing
Message copy is generated using Anthropic's Claude API. Cart and customer first-name data are sent to Anthropic strictly to generate the message. Anthropic does not train on this data. See Anthropic's privacy policy.
5. Sub-processors
- Fly.io (hosting, EU/US data centres)
- Neon (PostgreSQL database)
- Anthropic (AI message generation)
- Brevo (email delivery)
- Twilio (SMS delivery, where enabled)
- Stripe (subscription billing)
- PostHog (product analytics)
- Sentry (error monitoring)
6. Retention
We retain abandoned-cart and customer contact data for as long as the merchant has an active subscription, plus 90 days. On uninstall, the merchant can request immediate deletion at cartrecoveryai@gmail.com.
7. Customer rights (GDPR / CCPA)
End customers of merchants have the right to access, correct, or delete their personal data. Requests should be sent to the merchant. Merchants can forward requests to cartrecoveryai@gmail.com and we will respond within 30 days.
8. Shopify GDPR webhooks
We honour the three mandatory Shopify GDPR webhooks: customers/data_request, customers/redact, and shop/redact. Customer data is purged within 30 days of a redact request; shop data is purged within 30 days of uninstall.
9. Security
All traffic is TLS 1.2+. PII fields (email, phone) are encrypted at rest. Access tokens are stored encrypted. Internal access is logged.
10. Changes
Material changes will be announced via the merchant dashboard at least 14 days before they take effect.