Privacy Policy

Introduction

CartClimb ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Shopify application and related services.

By installing and using CartClimb, you agree to the collection and use of information in accordance with this policy.

Information We Collect

Store Information

When you install CartClimb on your Shopify store, we collect:

• Shop Domain: Your Shopify store's domain (e.g. yourstore.myshopify.com)
• Store Name: Your store's display name
• Email Address: The email Shopify provides for your account in the OAuth session payload. We do not send marketing email and we do not initiate outreach; this field is stored only because Shopify includes it in the session and we do not use it for support, notifications, or marketing.
• Plan Information: Your Shopify plan level for feature compatibility

Cart Data (Client-Side Only)

The app accesses cart information to display progress:

• Cart Total: The current cart value to calculate progress toward thresholds
• Currency: Your store's currency for display formatting

Important: Cart data is processed entirely on the client-side (in the customer's browser). We do not store or transmit individual cart data to our servers.

Configuration Data

We store your app configuration settings:

• Display mode preferences
• Threshold amounts and reward types
• Color and positioning settings
• Mobile visibility preferences

Usage Data

We automatically collect certain information about how you use our app:

• Features used and settings configured
• Error logs for troubleshooting
• App installation and uninstallation events

How We Use Your Information

We use the collected information for the following purposes:

• Provide Services: To display progress bars on your Shopify store
• Save Settings: To persist your configuration across sessions
• Improve the App: To understand usage patterns and improve our services
• Customer Support: To respond to your inquiries and provide technical support
• Billing: To process subscription payments through Shopify's billing system
• Communication: To send important updates about the app, such as feature changes or maintenance notices

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

Service Providers

• Shopify: We operate within Shopify's platform and share necessary data with Shopify for app functionality and billing
• Cloud Hosting: Our servers are hosted on secure cloud infrastructure (Fly.io)

Legal Requirements

We may disclose your information if required by law, court order, or government regulation, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

Data Security

We implement industry-standard security measures to protect your data:

• All data transmission is encrypted using SSL/TLS
• Configuration data is stored in secure, isolated database instances (Fly.io managed Postgres with encryption at rest and encrypted backups)
• Regular dependency updates, automated vulnerability scanning, and internal security review
• Limited employee access to customer data

Order Data and Analytics

CartClimb provides merchants with a Performance dashboard that shows orders, average order value, upsell revenue, free-gift counts, and the share of orders that reached a configured reward tier. To produce these metrics, CartClimb subscribes to the Shopify orders/paid webhook and reads the following fields from each paid order:

• The Shopify order id (an opaque numeric identifier)
• Order total, subtotal, and currency
• Line-item price and quantity
• Line-item properties — specifically the tags written by the CartClimb widget (_cartclimb_upsell and _cartclimb_gift_tier_id) used to attribute upsell and free-gift revenue

CartClimb does not read, store, transmit, log, or share any of the following from order, customer, or checkout data: customer first or last name, email address, phone number, shipping or billing address, IP address, browser session, device identifier, or any other field that identifies a customer.

CartClimb does not access the Customers resource and does not request access to protected customer fields.

Retention

Per-order analytics records are retained until one of the following occurs, at which point they are permanently deleted:

• The merchant uninstalls the app (app/uninstalled webhook).
• The merchant requests shop-level deletion (shop/redact webhook — within 30 days of uninstall per Shopify GDPR policy).
• A specific customer requests deletion (customers/redact webhook — records for the listed order ids are removed within the GDPR 30-day window).

Sub-processors

CartClimb stores analytics records in Fly.io managed Postgres (encrypted at rest, encrypted backups) and serves traffic from Fly.io edge regions. No analytics data is shared with any third party.

Data Retention

We retain your data for as long as your app is installed and your account is active. Upon uninstallation:

• Store settings, configuration, and tier definitions are deleted within 30 days
• Session data is immediately revoked
• All analytics records (order facts, daily metrics, and funnel counts) are permanently deleted within 30 days

Your Rights (GDPR)

If you are located in the European Union, you have the following rights:

• Access: Request a copy of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data
• Portability: Request your data in a portable format
• Restriction: Request limitation of data processing
• Objection: Object to certain data processing activities

To exercise these rights, contact us at hello@verdash.io.

California Privacy Rights (CCPA)

California residents have additional rights under the CCPA:

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt out of the sale of personal information (we do not sell data)
• Right to non-discrimination for exercising privacy rights

Cookies and Tracking

Our app widget on your storefront may use:

• Local Storage: To cache cart data for faster progress bar updates
• Session Storage: To maintain state during the shopping session

We do not use third-party tracking cookies or advertising trackers in our storefront widget.

Our storefront widget sends aggregated event counts (such as "progress bar viewed", "upsell viewed", or "upsell added to cart") to CartClimb's own servers via the browser's sendBeacon API. These payloads contain only the event type and the merchant's shop domain — no customer identifier, no cart contents, no IP address, no cookie value. They are used solely to compute aggregate funnel metrics displayed in the merchant's Performance dashboard, and are subject to the same retention and deletion rules as other analytics records (see Order Data and Analytics, above).

Children's Privacy

CartClimb is not intended for use by children under 13 years of age. We do not knowingly collect personal information from children under 13.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. Continued use of the app after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions or concerns about this Privacy Policy, please contact us:

• Email: hello@verdash.io
• Support: hello@verdash.io

Terms of Service

Last updated: November 28, 2024

1. Acceptance of Terms

By installing or using CartClimb, you agree to be bound by these Terms of Service. If you do not agree to these terms, do not use our app.

2. Description of Service

CartClimb is a Shopify application that displays progress bars showing customers how close they are to earning rewards like free shipping, discounts, and gifts. The service includes real-time cart tracking, multiple display modes, and customization options.

3. Account Requirements

• You must have an active Shopify store to use CartClimb
• You must have authorization to install apps on your Shopify store
• You are responsible for maintaining the security of your accounts

4. Acceptable Use

You agree not to:

• Use the service for any illegal purpose
• Mislead customers about rewards they cannot actually receive
• Attempt to reverse engineer or modify the app
• Interfere with or disrupt the service's infrastructure
• Use the service to display false or deceptive information

5. Reward Fulfillment

Important: CartClimb is a visual motivation tool. You are solely responsible for:

• Creating and managing discount codes in Shopify Admin
• Setting up free shipping rates that match your thresholds
• Fulfilling any free gifts or rewards promised
• Ensuring your promotions comply with applicable laws

We are not responsible for reward fulfillment or any discrepancies between what the progress bar displays and what customers actually receive.

6. Billing and Payments

• All billing is handled through Shopify's billing system
• Subscription fees are charged monthly
• You may cancel at any time through your Shopify admin
• Refunds are handled according to Shopify's refund policy
• A 7-day free trial is offered for new installations

7. Service Availability

We strive to maintain high availability but do not guarantee uninterrupted service. We may perform maintenance that temporarily affects service availability. We are not liable for any downtime or service interruptions.

8. Limitation of Liability

CartClimb is provided "as is" without warranties of any kind. We are not liable for any indirect, incidental, special, or consequential damages arising from your use of the service, including but not limited to:

• Lost sales or revenue
• Customer complaints about unfulfilled rewards
• Technical issues affecting your store
• Any claims arising from your promotional offers

Our total liability is limited to the amount you paid for the service in the preceding 12 months.

9. Indemnification

You agree to indemnify and hold harmless CartClimb and Verdash from any claims, damages, or expenses arising from your use of the service, your promotional offers, or violation of these terms.

10. Changes to Service

We reserve the right to modify, suspend, or discontinue any part of the service at any time. We will provide reasonable notice for significant changes.

11. Termination

Either party may terminate this agreement at any time. Upon termination, your right to use the service ends immediately, and we may delete your data according to our Privacy Policy.

12. Governing Law

These terms are governed by the laws of the United States. Any disputes shall be resolved in the courts of California.

13. Contact

For questions about these terms, contact us at hello@verdash.io.