Privacy Policy

1. Introduction

Alintro Cart Recovery ("we," "our," or "the App") is committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use our Shopify application for abandoned cart recovery.

By installing and using our App, you agree to the collection and use of information in accordance with this policy. We comply with applicable data protection laws including the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other privacy regulations.

2. Information We Collect

2.1 Information from Shopify

When you install our App, we receive certain information from Shopify:

• Store information (domain, email, timezone, currency)
• Customer data (names, email addresses, phone numbers)
• Cart and checkout information (cart contents, cart value, checkout status)
• Order information (order numbers, amounts, dates, fulfillment status)
• Product information (names, IDs, prices, images)
• Webhook data for cart abandonment and order events

2.2 Information You Provide

• Email sender configuration (sender name, email address)
• Email templates and customizations
• Recovery sequence configurations and timing
• Notification preferences and settings
• Support requests and communications

2.3 Automatically Collected Information

• Email delivery and engagement metrics
• Cart recovery conversion data
• App usage analytics
• Error logs and performance data

3. How We Use Your Information

We use the collected information for:

• Cart Recovery: Detecting abandoned carts and sending recovery emails
• Email Delivery: Sending abandoned cart recovery emails via our email service
• Personalization: Customizing email content with customer and product details
• Analytics: Providing recovery rates, revenue metrics, and campaign performance
• Service Improvement: Analyzing usage patterns to enhance features
• Customer Support: Responding to inquiries and providing technical assistance
• Legal Compliance: Meeting regulatory requirements

4. Legal Basis for Processing (GDPR)

We process personal data based on:

• Consent: For marketing communications and optional features
• Contract Performance: To provide the cart recovery services you've requested
• Legal Obligations: To comply with applicable laws and regulations
• Legitimate Interests: For transactional recovery emails, security, and service improvements

5. Information Sharing and Disclosure

We share information only in these circumstances:

5.1 Service Providers

• Email Delivery: Resend for sending recovery emails
• Infrastructure: Cloud hosting and database providers

5.2 Legal Requirements

We may disclose information if required by law, court order, or government regulation, or to protect our rights, property, or safety.

We never sell personal data to third parties for marketing purposes.

6. Data Retention

We retain data for different periods based on its purpose:

• Active Account Data: Duration of service plus 30 days after app uninstall
• Abandoned Cart Records: 90 days for recovery analytics
• Email Logs: 1 year for compliance and analytics
• Support Communications: 2 years for service improvement
• Analytics Data: 2 years in aggregated form

After retention periods expire, data is securely deleted or anonymized.

7. Data Security

We implement appropriate security measures including:

• Encryption of data in transit using TLS/SSL
• Encryption of sensitive data at rest
• Secure credential storage and management
• Access controls and authentication requirements
• Regular security audits and vulnerability assessments
• Incident response procedures

8. Your Rights

Under applicable privacy laws, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data (subject to legal requirements)
• Portability: Receive your data in a machine-readable format
• Restriction: Limit processing of your data
• Objection: Object to certain processing activities
• Withdraw Consent: Revoke previously given consent

To exercise these rights, contact us at support@alintro.com. We respond to requests within 30 days.

9. Email Notification Terms

9.1 Transactional vs Marketing Emails

Abandoned cart recovery emails are considered transactional emails as they relate to an existing customer action (adding items to cart). These differ from marketing emails and typically do not require separate opt-in consent.

9.2 Unsubscribe Options

All recovery emails include an unsubscribe link. When customers unsubscribe, we immediately stop sending them recovery emails and record their preference.

10. International Data Transfers

Your data may be transferred to and processed in countries outside your location. We ensure appropriate safeguards are in place, including Standard Contractual Clauses for transfers from the EU/EEA.

11. Children's Privacy

Our App is designed for business use and is not intended for children under 16. We do not knowingly collect personal information from children.

12. California Privacy Rights (CCPA)

California residents have additional rights:

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of sale of personal information (we do not sell data)
• Right to deletion
• Right to non-discrimination for exercising privacy rights

13. Cookies and Tracking

We use essential cookies for authentication and session management within the Shopify Admin context. We track email opens and clicks to measure recovery campaign effectiveness. We don't use tracking cookies for third-party advertising.

14. Data Breach Notification

In the event of a data breach that poses risk to your rights and freedoms, we will notify affected users and relevant authorities within 72 hours of discovery, as required by GDPR.

15. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or through the app. Continued use after changes constitutes acceptance of the updated policy.

16. Contact Information