Cartal Privacy Policy

Last updated: October 20, 2026

Cartal (“the App”) is a Shopify app provided by DesignBuff LLC (“we”, “us”). It adds cart rewards, free gifts, upsells, bundles, and related reporting to Shopify stores. This policy explains what information the App collects, why, how long it is kept, and the choices merchants and their customers have.

Who this policy covers

Merchants: Shopify store owners and staff who install and use the App.
Customers: shoppers who visit a store that uses the App.

Information we collect

From merchants, when the App is installed

Store details: the store’s myshopify.com domain, store currency, and the Shopify plan type (used to tell development stores apart from live stores).
Access credentials: the access token Shopify issues so the App can act on the store’s behalf. It is stored encrypted at rest and is never shared.
App settings: reward tiers, gifts, upsells, bundles, and appearance settings. These are stored in the merchant’s own Shopify store (as app-owned metafields and products), not in our database.
Billing status: the Cartal plan and subscription status reported by Shopify Billing. We never see or store payment card details.
Monthly online order counts: one number per month of how many online orders the store received (an aggregate count only, with no order details or customer information), used to tell merchants when a different plan fits their volume.
Change history: a log of settings changes (what changed and when) so merchants can review and so we can support them.

We do not store store staff names or email addresses.

From customers, when they shop

Order data, minimized at the source: when an order is placed, Shopify sends the App the order ID, time, currency, subtotal, line items (with Cartal’s own line tags), and discounts. We do not request or store customer names, email addresses, phone numbers, or shipping or billing addresses.
Anonymous activity counts: with the customer’s consent where required, the App counts events such as “progress bar viewed”, “reward unlocked”, “upsell clicked”, and “bundle added”. Only daily totals per store are stored (for example, “42 upsell clicks on Tuesday”). No individual visitor, device, IP address, or cookie identifier is stored.

How we use information

To provide the App’s features: calculate rewards, apply discounts through Shopify, show upsells, and build bundles.
To show merchants reports, such as revenue influenced by the App and average order value.
To check that discounts were applied correctly and alert merchants to any pricing mismatch.
To manage plans and billing through Shopify.
To keep the App secure, reliable, and supportable.

We do not sell personal information, use it for advertising, share it with data brokers, or use it to make automated decisions with legal or similarly significant effects on anyone.

The App’s storefront analytics respect Shopify’s customer privacy settings. If a visitor has not consented to analytics where consent is required, those events are not counted. Merchants remain responsible for their own store’s privacy notice and consent banner.

Where information is stored and who processes it

Shopify: app settings and products created by the App live in the merchant’s Shopify store.
Cloudflare: hosts the App’s servers and processes requests.
Neon: hosts the App’s database (store records, settings history, daily totals, and order IDs used to avoid double counting).

These providers process data only to run the App. Data is encrypted in transit (TLS) and at rest.

How long we keep information

Order IDs (used only to avoid counting an order twice): deleted after 45 days.
Daily totals, monthly order counts and settings history: kept while the App is installed.
After uninstall: access tokens are deleted right away. When Shopify sends its store deletion request (48 hours after uninstall), we delete all remaining data for that store.

Data requests

The App supports Shopify’s mandatory privacy webhooks:

Customer data requests: because the App does not store customer identities, there is no customer record to return. We confirm this to the merchant on request.
Customer deletion requests: there is no customer-identifiable data to delete. Daily totals are anonymous.
Store deletion: all data for the store is deleted as described above.

Customers who want to exercise privacy rights should contact the store they shopped with. Merchants can contact us directly.

Security

Access is limited to the people who operate the App. Credentials are encrypted at rest, all traffic uses TLS, and the App requests only the Shopify permissions it needs. If we ever learn of a breach affecting merchant data, we will notify affected merchants without undue delay and as required by law.

Children

The App is meant for businesses and is not directed to children.

Changes to this policy

We may update this policy as the App changes. The “Last updated” date above shows when it was last revised. Material changes will be announced in the App.

Contact

DesignBuff LLC
Email: hello@designbuff.co
Address: 28 Spring St, Unit #150, Princeton, NJ 08542