Back to home

Privacy Policy

How CartBoost uses store information and protects credentials.

Last updated: October 10, 2026

Introduction

CartBoost is operated by Searivo ("CartBoost", "we", "us", or "our"). CartBoost is an eCommerce conversion optimization application designed specifically for Shopify merchants, providing a branded cart drawer, shipping goals, and complementary recommendations.

We respect your privacy and are committed to protecting merchant and customer data. This Privacy Policy explains what information we collect, how we use it, and how to contact us about your data.

Information We Collect

To provide, maintain, and optimize CartBoost, we collect and process the following information through official Shopify APIs:

  1. Merchant Store Information — Your Shopify store domain (example.myshopify.com), primary currency, default language, and authorized API access tokens granted during app installation.
  2. Product & Catalog Metadata — Product IDs, titles, handle URLs, and variant structures necessary to attach cart accessories and recommendations.
  3. App Configuration Settings — Your customized shipping thresholds, eligible countries, messages, recommendation selections, and cart appearance configured in the merchant dashboard.

Information We DO NOT Collect

  • No End-Customer PII: CartBoost does not collect, harvest, or store end-customer Personal Identifiable Information (PII) such as buyer names, residential addresses, email addresses, phone numbers, or passwords.
  • No Payment or Cardholder Data: All merchant subscription billing is conducted strictly via Shopify's native Billing API. All shopper checkouts occur directly on Shopify's PCI-DSS compliant checkout. We never touch, process, or store credit card numbers.

How We Use Information

We use collected information solely to:

  • Render your published cart drawer and accessory recommendations on your Shopify storefront.
  • Read authorized product information for the merchant recommendation selector.
  • Save merchant drafts and published configurations. Cart changes, notes and checkout are processed by Shopify.
  • Deliver technical support and critical service notifications.

Data Sharing and Third Parties

We never sell, rent, monetize, or trade merchant or store data to data brokers, advertisers, or third-party networks. Data is only processed through secure infrastructure providers under strict confidentiality agreements.

Shopify Data Requests

CartBoost provides endpoints for signed Shopify data-protection notifications:

  1. Mandatory Webhooks: We provide automated endpoints for Shopify's mandatory compliance webhooks:
    • customers/data_request: We report any customer records associated with the shop (CartBoost stores zero customer PII).
    • customers/redact: We purge any customer-linked references if applicable.
    • shop/redact: Within 48 hours of receiving a shop redaction notice from Shopify, all store configurations, credentials, and associated records are permanently erased from our databases.
  2. App Uninstallation: Upon receiving an app/uninstalled webhook, API access tokens are removed from active connections and the published cart configuration is disabled. Store data is removed on a subsequent shop redaction notification.

Data Security

All sensitive credentials and Shopify API tokens are encrypted at rest using industry-standard AES-256 encryption. All communication occurs over secure HTTPS / TLS protocols.

Contact Us

If you have questions about this Privacy Policy or wish to make a data subject request, please contact us at: