1. Who we are
CartGains is a brand of INFOXERA FZE, a company registered in the Sharjah Research, Technology and Innovation Park (SRTIP), Sharjah, United Arab Emirates. We build and run the Sticky Bundles & Quantity Breaks app for Shopify merchants (“the app”) and this website.
In this policy, “we”, “us” and “our” mean INFOXERA FZE. “You” means a merchant who installs the app or a visitor to this website. “Shoppers” means the customers who visit a merchant’s store. If you have any question about this policy, email us at [email protected].
2. Information we collect from merchants
When you install and use the app, we collect:
- Store details that Shopify shares with apps when they are installed, such as your store name, store address (domain), and the contact email for your store.
- Access credentials issued by Shopify that let the app work with your store. These are stored securely and used only to run the app.
- Your app settings and offers, including discount amounts, styling choices, excluded collections and the other rules you set.
- Order information needed to run the app, such as order numbers, the products and quantities ordered, prices and the discounts applied. We use this to apply your offers and to show you the extra revenue your offers bring in.
- Messages you send us, for example when you email our support team.
3. Information about your shoppers
The app never collects your shoppers’ names, email addresses, phone numbers, postal addresses or payment details. Checkout and payment are handled entirely by Shopify.
The app decides which offer to show from the products a shopper views during their current visit to your store. Here is exactly how that information is handled:
- The list of products viewed is kept in the shopper’s browser for the current visit only, using the browser’s session storage. It is cleared when they close the tab.
- The bar does not use cookies, does not track shoppers across visits or across other websites, and does not build profiles of shoppers.
- When a shopper adds an offer to their cart, the products they viewed are attached to the cart so the correct discount can be applied at checkout. Because of this, that list also appears on the order in your Shopify admin.
For shopper information, you (the merchant) are responsible for how it is used in your store, and we process it on your behalf to provide the app. We recommend that your store’s own privacy policy mentions that you use apps to show product offers.
4. How we use information
We use the information described above only to:
- provide, run and maintain the app, including showing offers and applying discounts at checkout;
- show you reports on how your offers are performing;
- answer your questions and provide support;
- fix problems, keep the app secure and prevent misuse;
- improve the app, using combined information that does not identify individual shoppers; and
- meet our legal obligations.
We do not sell personal information, and we do not use shopper information for advertising.
5. Who we share information with
We share information only when it is needed to run the app or when the law requires it. These are the services we use to run the app. Each may only use the information to provide its service to us:
- Shopify — the platform the app runs on.
- Vercel — hosting for the app (United States).
- Supabase — the database where your store’s settings and order records are held (United States).
- Cloudflare — hosting for this website.
- Crisp — the live chat in the app, operated by Crisp IM SAS in France, with data stored in Europe. It receives your store’s domain and whatever you write in the chat.
- Slack — internal alerts to our team. It receives your store’s domain and the time of an event, never customer or order details.
We may also share information with:
- Authorities, if we are required to by law or need to protect our rights, our users or the public.
- A new owner, if our business or the app is sold or transferred, in which case this policy will continue to apply to your information.
6. This website
This website is hosted on Cloudflare Pages. Cloudflare processes basic technical information, such as your IP address and browser type, to deliver the site and protect it from attacks.
We use Google Analytics to understand how visitors use this website, and the Meta pixel to measure how our advertising performs. These tools set cookies and collect information such as the pages you visit, the device you use and your approximate location.
If you visit from Europe or the UK, neither tool runs unless you choose Accept in the cookie banner. Elsewhere, they run when a page loads. Wherever you are, you can change your choice at any time with the Cookie settings link at the bottom of every page, and we save your choice in your browser so we don’t ask again. You can also opt out of Google Analytics with Google’s browser add-on, manage how Meta uses this information in your Facebook or Instagram ad settings, and block or delete cookies in your browser settings.
The live chat inside the app’s admin is run by Crisp, which sets its own cookies so your conversation carries on between visits. Crisp’s privacy policy explains how it uses them.
7. How long we keep information
We keep your store’s information for as long as the app is installed. When you uninstall, we delete your store’s access credentials and contact email straight away. Shopify then sends us a deletion request about 48 hours later, and we delete your offers, settings and order records on receiving it. We keep one record: your store’s domain, the total extra revenue the app generated for you, and which plan that placed you on. We keep it so that if you ever reinstall, you return to the plan you had rather than starting over. It holds nothing about your shoppers and no order details. If you want it removed, email us at [email protected].
Support emails are kept for as long as needed to help you and to keep a record of our conversations.
8. Your rights and shopper requests
Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, or to object to how we use it. To make a request, email us at [email protected].
Shoppers who want to access or delete their information should contact the store they shopped with. When a store passes on a shopper’s request through Shopify, we respond to it as Shopify requires, including requests to provide or delete a shopper’s data.
9. How we protect information
Information is encrypted while it travels between your store, the app and our servers, and access to it is limited to the people and systems that need it to run the app. No system is completely secure, but we work to protect your information and will act quickly if something goes wrong.
10. International transfers
We and our service providers may process information in countries other than the one you live in. When we do, we take steps to make sure it stays protected in line with this policy.
11. Children
The app and this website are made for businesses and are not intended for children. We do not knowingly collect information from children.
12. Changes to this policy
We may update this policy from time to time. When we do, we will change the “Last updated” date at the top of this page, and if the changes are significant we will let you know by email or inside the app.
13. Contact us
If you have any question about this policy or how we handle your information, email us at [email protected], or write to us at INFOXERA FZE, Block B-B47-068, SRTIP, Sharjah, United Arab Emirates.
