Privacy Policy

ConvertLabs Cart Drawer · Last updated June 17, 2026

This Privacy Policy explains how the ConvertLabs Cart Drawer app ("the App", "we", "us") handles information when a merchant installs it on their Shopify store. We act as a data processor on the merchant's behalf and process the minimum data needed to run the App.

Information we process

• Store & session data: your store domain and the Shopify access token / session needed to authenticate the App.
• Order data: via the read_orders scope and the orders/create webhook, we read order totals and line items to (a) determine your monthly order volume for billing, and (b) attribute revenue to A/B test variants and in-cart offers (upsells, shipping protection).
• Product data: via read_products, to power the cart and upsell previews.
• Theme data: via read_themes, only to detect whether the app embed is enabled on your published theme.
• Storefront activity: anonymous, aggregated counts of cart opens, checkout clicks, and offer adds — used for your analytics dashboard.

What we store

We store only aggregated, non-identifying figures (daily counts and revenue totals) and your store's configuration and A/B test results. We do not store customer names, emails, addresses, or any other customer personal information. Your drawer configuration is saved in a Shopify-owned metafield on your store.

How we use it

Data is used solely to operate the App: billing, analytics, and A/B testing for your store. We do not sell or share personal data, and we do not use it for advertising or for any purpose beyond providing the App.

Data retention & deletion

We retain aggregated data only while the App is installed. When you uninstall, or when Shopify sends a shop/redact request, we delete the store's session, analytics, and A/B test records. Because we hold no customer personal data, the mandatory customers/redact and customers/data_request webhooks have no customer records to act on.

Security

Data is encrypted in transit (HTTPS) and at rest. Access is limited to the systems that operate the App.

Subprocessors

The App runs on Shopify's platform and our hosting provider. Order and store data is accessed through Shopify's official APIs under the permissions you grant at install.

Your rights

You can uninstall the App at any time to stop all processing and trigger deletion of your data. For any privacy request, contact us below.

Contact

Questions about this policy: support@convertlabs.app