CartRise Privacy Policy
Last updated: October 2026
CartRise (“the App”) is a Shopify app that adds a cart drawer with upsells and a rewards bar to a Shopify store. It is provided by Bens e Mais (“we”, “us”). This policy explains what information the App collects when a merchant installs it, how we use it and how it is removed.
Information we collect
When you install CartRise, the App accesses the following through Shopify’s APIs:
- Store information: your store’s myshopify domain, store ID, name, currency and money format.
- Product and collection data: titles, images, prices and variants of the products and collections you choose for upsell rules, read with the
read_productspermission. This data is read on demand and is not copied to our servers. - Access credentials: an access token issued by Shopify for your store, used only to check your CartRise plan and to switch the cart drawer on or off.
- Plan status: whether your store has an active CartRise plan and the plan name.
Your cart drawer settings (texts, colors, upsell rules) are saved in your own Shopify store as app metafields, not on our servers.
Customer information
CartRise does not collect, store or process personal information about your customers. The cart drawer runs in the shopper’s browser and talks only to your store’s own Shopify cart and product endpoints. We do not use cookies or tracking pixels, and the cart analytics described below are anonymous.
Cart analytics
To show you how the cart performs, the cart drawer sends anonymous, aggregated counts to CartRise: cart opens, upsell products shown and added (product ID, title and price), and checkouts started with their cart value. These counts are stored per store and per day. They contain no names, emails, addresses, IP addresses or cookies, and they cannot identify a shopper. To know which cart items came from an upsell, the drawer keeps a list of product variant IDs in the shopper's browser session storage, which is cleared when the browser tab is closed.
If you choose a Google Font in the cart’s design settings, that font is loaded from Google Fonts, which receives the visitor’s IP address as part of the request. Keep the font set to “Theme font” if you don’t want this.
How we use information
- To provide the App’s features inside your Shopify admin and storefront.
- To check whether your store has an active plan and to enable or disable the cart drawer accordingly.
- To show you anonymous performance metrics of your cart and upsells in the CartRise admin.
- To respond to your support requests.
We do not sell, rent or share your information with third parties, except with the service providers that host the App (Cloudflare) and as required by law.
Storage and security
The access token and plan status are stored in Cloudflare’s infrastructure and transmitted only over HTTPS. Access is limited to what the App needs to work.
Data retention and deletion
- When you uninstall CartRise, Shopify removes the App’s metafields from your store and we delete your access token and plan status. Shop redaction also deletes your store's cart analytics.
- We respond to Shopify’s mandatory privacy requests (customer data request, customer redaction and shop redaction). Because we hold no customer data, customer requests require no action; shop redaction deletes everything we keep about your store.
Your rights
You can request access to, correction of, or deletion of the information we hold about your store at any time by contacting us. If you are in the European Economic Area, the United Kingdom or Brazil (LGPD), you have the rights granted by your local data protection laws.
Changes
We may update this policy. Changes are posted on this page with a new “Last updated” date.
Contact
Questions about privacy: bensemais26@gmail.com
Resumo em português: o CartRise não coleta dados pessoais dos clientes da sua loja; as métricas do carrinho são contagens anônimas. Guardamos apenas o domínio da loja, o token de acesso da Shopify e o status do plano, apagados quando o app é desinstalado. Dúvidas: bensemais26@gmail.com.