CartParley privacy policy
CartParley is a Shopify app, operated by Enchant Ecom (“we”), that adds an AI sales associate to a merchant’s online store. This policy explains what information the app handles, why, who it is shared with, and how long it is kept. It covers two groups of people: merchants who install CartParley, and shoppers who chat with the assistant on a merchant’s store.
For shopper information, the merchant decides to use CartParley on their store, and we process that information on the merchant’s behalf to provide the service. The merchant’s own privacy policy also applies to shoppers on their store.
Information we collect
From merchants
- Store details from Shopify: the shop domain, the shop name, and the store contact email (used to send discount-request notifications).
- An access token issued by Shopify when the app is installed, used to act on the store only within the permissions the merchant approved.
- Assistant settings the merchant enters: assistant name, tone, custom instructions, support email, button and greeting text, avatar image, catalog exclusions, discount settings, and a record of the merchant’s consent to discount emails.
- A copy of the store’s product catalog (titles, descriptions, tags, types, vendors, prices, image links, and collections), so the assistant can answer from real product data.
- Usage and billing records: conversation counts, free-trial usage, and subscription status. Payment is handled entirely by Shopify; we never receive card or bank details.
From shoppers
- The messages a shopper sends to the assistant and the assistant’s replies.
- A random, anonymous session identifier and conversation identifier, stored in the shopper’s browser (see “Browser storage” below).
- While chatting: the contents of the shopper’s cart (items and quantities), the type of page they are on, the product they are viewing, and the country their store experience is set to, so the assistant can answer in context and quote the right prices.
- An email address, only if the shopper chooses to give one, so a discount code can be sent to them if the merchant approves it.
- Details of any discount request: the amount asked for, the reason given, and the items it covers.
We do not collect shopper names, postal addresses, phone numbers, payment details, or Shopify customer account IDs. Please don’t share sensitive information in the chat; anything typed into it is stored as part of the conversation.
How we use information
- To answer shopper questions about products, stock, and store policies, and to add items to the cart when the shopper asks.
- To pass a shopper’s discount request to the merchant, create the discount code the merchant approves, and deliver it in the chat or by email.
- To show merchants their conversations, discount requests, and usage in the app.
- To bill merchants through Shopify for the conversations they use.
- To keep the service secure, prevent abuse, and fix problems.
We do not sell personal information, use it for advertising, or build profiles of shoppers across stores.
AI processing
Replies are generated by Claude, an AI model provided by Anthropic. To produce each reply, the conversation so far and the relevant store information (the merchant’s assistant settings, matching products, cart contents, and page context) are sent to Anthropic’s API. Under Anthropic’s commercial terms, data sent through its API is not used to train its models. AI replies can be wrong; product details, prices, and discounts shown at checkout are what apply.
Who we share information with
We share information only with the service providers needed to run CartParley:
- Shopify: the platform the app runs on; product, cart, discount, and billing operations go through Shopify’s APIs.
- Anthropic: generates the assistant’s replies, as described above.
- Resend: delivers transactional emails (discount-request notifications to merchants and approved codes to shoppers).
- Heroku (Salesforce): hosts the app and its database, in the United States.
Each merchant can see the conversations and discount requests from their own store. We may also disclose information if the law requires it.
Browser storage
On the storefront, the chat widget stores an anonymous session identifier and the current conversation identifier in the browser’s local storage, so a conversation continues across pages, and remembers whether the chat panel was open for the current browser tab. CartParley does not set advertising or third-party tracking cookies.
How long we keep information
- Conversations, messages, and discount requests are deleted automatically 30 days after the conversation’s last activity.
- When a merchant uninstalls the app, their access token is deleted right away. Shopify then sends a deletion request 48 hours later, and we delete all of that store’s data: settings, catalog copy, conversations, and billing records.
- The only thing kept after that is a one-way hash of the shop domain with a count of free-trial conversations used, so reinstalling doesn’t reset the free trial. It contains no store or customer information.
- Discount codes the merchant approves are created in the merchant’s own Shopify store and stay there under the merchant’s control.
- Our hosting provider keeps short-lived technical logs, such as request times and IP addresses, for security and troubleshooting.
Your choices and rights
Shoppers can ask the store where they chatted to access or delete their data. When a merchant passes on a request through Shopify, we locate the conversations linked to that shopper’s email address and, for deletion requests, delete them. You can also contact us directly at enchantecom@hotmail.com.
Merchants can review their store’s conversations in the app, uninstall at any time to have their data deleted as described above, or contact us at enchantecom@hotmail.com for access or deletion requests.
Depending on where you live, you may have additional rights, such as correcting your data or objecting to its processing. We will respond to requests within 30 days.
Security
Data is encrypted in transit, each store’s data is kept separate from every other store’s, and access to production systems is restricted.
International transfers
CartParley and its providers process data in the United States. By using a store that runs CartParley, your information may be transferred there.
Children
CartParley is not directed at children under 16, and we do not knowingly collect their information.
Changes to this policy
If we change this policy, we will update the effective date above. For material changes, we will notify merchants in the app before they take effect.
Contact
Enchant Ecom, operator of CartParley. Questions or requests about privacy: enchantecom@hotmail.com.