Privacy Policy

Recartify (“we”, “us”, “our”) provides a customer chat application and related services for Shopify merchants. This policy describes how we collect, use, disclose, and protect personal information when you use our services, including our website at recartify.io, our merchant dashboard and mobile experience, and the storefront chat widget installed on merchant stores.

Last updated: April 13, 2026

Who this policy applies to

• Merchants — Shopify store owners and their staff who install and use Recartify.
• Customers — people who interact with the chat widget or otherwise engage with a merchant through Recartify.
• Visitors — users of our marketing website.

If you are a customer of a merchant, that merchant is responsible for its own storefront privacy practices. We process customer data on behalf of merchants to provide the chat service, as described below.

Information we collect

Depending on how you use Recartify, we may collect:

• Account and authentication data — such as name, email address, and credentials you use to sign in to our app (including session tokens as required for embedded Shopify apps).
• Shopify-related data — data made available through Shopify’s APIs according to the permissions you grant at install, such as shop identifiers, staff or customer records needed to operate chat, orders or products where required for app features, and related metadata. The exact data depends on your plan and app configuration.
• Chat and messaging content — messages, attachments, conversation metadata (for example timestamps, status, assignment), and information submitted through chat forms you configure.
• Technical and usage data — such as IP address, device and browser type, general location derived from IP, diagnostic logs, and usage events to operate, secure, and improve the service.
• Communications with us — information you send when you contact support or correspond with us.

How we use information

We use personal information to:

• Provide, maintain, and improve Recartify (including the chat widget, dashboard, notifications, and integrations).
• Authenticate users, prevent fraud and abuse, and protect the security of our systems.
• Communicate with merchants about the service, security, or policy updates.
• Comply with law, enforce our terms, and respond to lawful requests.
• Analyze aggregated or de-identified usage to understand how the product is used.

We do not sell your personal information. We do not use chat content to train generalized public AI models for unrelated third parties.

Legal bases (EEA, UK, and similar regions)

Where applicable, we rely on one or more of: performance of a contract with you, legitimate interests (such as securing and improving the service, consistent with your rights), consent where required, and legal obligation.

Sharing and subprocessors

We share personal information only as needed to run the service:

• Shopify — as integrated with your store, subject to Shopify’s terms and the permissions you approve.
• Service providers — trusted vendors who host infrastructure, send transactional email or push notifications, monitor reliability, or provide security and analytics, bound by confidentiality and processing terms.
• Legal and safety — when required by law or to protect rights, safety, and integrity of users, merchants, or the public.
• Business transfers — in connection with a merger, acquisition, or sale of assets, with notice as required by law.

International transfers

We may process and store information in countries other than where you live. Where we transfer personal data across borders, we use appropriate safeguards required by applicable law (such as standard contractual clauses where relevant).

Retention

We retain information only as long as needed to provide the service, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods may depend on your plan (for example, conversation history limits), merchant settings, and backup cycles. When data is no longer needed, we delete or de-identify it in line with our practices and applicable law.

Security

We implement technical and organizational measures designed to protect personal information against unauthorized access, loss, or alteration. No method of transmission over the Internet is completely secure; we work to continually improve our safeguards.

Your rights and choices

Depending on your location, you may have rights to access, correct, delete, or export personal information, or to object to or restrict certain processing. Merchants can manage much of their data through the Recartify app and Shopify admin. Customers should contact the relevant merchant for requests relating to storefront interactions; merchants may contact us for assistance.

You may also have the right to lodge a complaint with a supervisory authority. To exercise rights that apply to information we hold as a controller, contact us using the details below.

Children

Recartify is not directed at children under 16, and we do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us and we will take appropriate steps.

Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the “Last updated” date. For material changes, we will provide additional notice as appropriate (for example, via email or in-app notice).

Contact

For privacy questions or requests regarding this policy or your personal information, contact us at privacy@recartify.io.