Privacy Policy

CR-1. What Cart Reserve Collects

Cart Reserve operates at the merchant infrastructure level. It does not collect or store any shopper personally identifiable information (PII) — no names, email addresses, payment details, or shipping addresses. That data stays exclusively within Shopify.

The app stores the following reservation records in its own database:

• Shop domain — identifies which merchant store the reservation belongs to.
• Cart token — Shopify's anonymous identifier for a cart session; not linked to any shopper account.
• Variant ID — the specific product variant being held.
• Reserved quantity — the number of units held for that cart.
• Timestamps — when the reservation was created and when it expires.
• Order ID — received via Shopify's orders/create webhook when a cart converts to a paid order, used to release the corresponding hold.

To perform its function, the app requests the following Shopify API access scopes: read_inventory, read_orders, and read_products. These are read-only scopes; the app does not write to your inventory or orders through the API.

CR-2. Purpose

The reservation data listed above is collected solely to track temporary inventory holds and prevent overselling. No data is used for advertising, profiling, or any purpose beyond maintaining accurate hold state during active checkout sessions.

CR-3. Data Retention

Reservations are held for a default period of 10 minutes. A scheduled background sweep runs automatically to expire holds whose time has elapsed. Expired reservation records are deleted by this sweep and are not retained after expiry. Reservations are also released immediately when the corresponding order is confirmed via the orders/create webhook.

CR-4. No Third-Party Data Sharing

Cart Reserve does not sell, rent, or share reservation data with any third party. The only external service the app communicates with is the Shopify Admin API, which is inherent to operating as a Shopify app. Merchant stores and their shoppers are also subject to Shopify's own Privacy Policy and Terms of Service.

CR-5. Merchant Responsibilities

Cart Reserve is a merchant-facing infrastructure tool. The reservation records it stores are cart-level operational data, not shopper account data. Merchants installing Cart Reserve are responsible for ensuring their own use of the app complies with applicable privacy laws and their store's own privacy policy.

TC-1. Information We Collect

Information you provide to us:

• Contact details submitted through our forms, such as your name, email address, phone or WhatsApp number, and store URL.
• Information about your current e-commerce platform and store size (e.g. number of products, customers, and orders) provided for pricing estimates or migration audits.
• Any additional information you choose to share with us via email or messaging apps while discussing your migration project.

Information we access to perform a migration:

• Store data such as products, customers, orders, and content, accessed through read-only credentials or official platform APIs that you provide, solely for the purpose of completing your migration.

Information collected automatically:

• Standard usage data such as pages visited, browser type, and general location, collected through Google Analytics and similar tools to help us understand how visitors use our site.

TC-2. How We Use Your Information

• To respond to inquiries and provide migration audits or price estimates.
• To perform the migration services you request, including transferring products, customers, orders, and related store data to your new Shopify store.
• To communicate with you about your project, including status updates and support.
• To maintain, improve, and secure our website and services.
• To comply with legal obligations where applicable.

TC-3. How We Share Information

We do not sell your personal information. We may share information with trusted third-party service providers who help us operate our business, including:

• Formspree — to process form submissions from this website.
• Google Analytics — to understand website traffic and usage patterns.
• Shopify and source platform APIs — to read and transfer your store data as part of the migration you request.

These providers only receive the information necessary to perform their function and are not permitted to use it for any other purpose. We may also disclose information if required by law or to protect our rights.

TC-4. Data Security

We use reasonable technical and organizational measures to protect the information and store access you share with us, including using read-only access wherever possible during migrations. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

TC-5. Data Retention

We retain contact and project information for as long as needed to provide our services and maintain business records, and we delete or revoke access to store credentials once a migration is complete and confirmed, unless you ask us to retain it for ongoing support.

TC-6. Your Rights

Depending on your location, you may have the right to access, correct, or request deletion of your personal information. To make such a request, contact us using the details below and we will respond within a reasonable timeframe.

TC-7. Cookies

Our website uses cookies and similar technologies for analytics and to remember your preferences. You can control or disable cookies through your browser settings, though some parts of the site may not function as intended without them.

TC-8. Children's Privacy

Our website and services are intended for business use and are not directed to children. We do not knowingly collect personal information from children.