Privacy Policy

Last Updated: November 11, 2025

1. Introduction

Cartrel ("we", "our", or "us") is a B2B wholesale platform that connects suppliers and retailers on Shopify. This Privacy Policy explains how we collect, use, and protect information when you use our Shopify app.

2. Information We Collect

2.1 Merchant Information

When you install Cartrel, we collect:

• Your Shopify store domain
• Store access tokens for API operations
• Business role (supplier or retailer)

2.2 Product Information

We collect product data from supplier stores to enable wholesale catalog browsing:

• Product titles, descriptions, and images
• Product variants and SKUs
• Wholesale prices and inventory levels

2.3 Order Information

When retailers place wholesale orders, we collect:

• Product IDs and variant IDs
• Quantities and wholesale prices
• Purchase order numbers

We do NOT collect end-customer personal information such as names, addresses, email addresses, or phone numbers.

3. How We Use Your Information

3.1 Core Functionality

• Create wholesale connections between suppliers and retailers
• Display supplier product catalogs to connected retailers
• Process wholesale orders and create draft orders in supplier stores
• Track order status and inventory mappings

3.2 Service Improvements

• Monitor app performance and errors
• Provide customer support
• Improve and develop new features

4. Data Sharing

We do not sell, trade, or rent your information to third parties. We only share data:

• Between connected merchants: Product and order information is shared between suppliers and retailers who have established connections through Cartrel
• With Shopify: We use Shopify's API to create draft orders and sync product information
• As required by law: If legally required to do so

5. Data Security

We implement industry-standard security measures:

• All data transmission uses SSL/TLS encryption (HTTPS)
• Database stored securely with access controls
• Access tokens encrypted and stored securely
• Regular security updates and monitoring

6. Data Retention

We retain your data:

• While your account is active: All data is retained for app functionality
• After uninstallation: Data is retained for 30 days to allow for reinstallation and business continuity
• Deletion requests: You can request immediate data deletion by contacting us

7. Your Rights

As a merchant using Cartrel, you have the right to:

• Access the data we store about your store
• Request correction of inaccurate data
• Request deletion of your data
• Export your data
• Uninstall the app at any time

8. Third-Party Services

Cartrel integrates with:

• Shopify: For store authentication and API operations (see Shopify's Privacy Policy)

9. Children's Privacy

Cartrel is a business-to-business application intended for use by merchants. We do not knowingly collect information from individuals under 18 years of age.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last Updated" date and, where appropriate, by sending you an email notification.

11. GDPR Compliance

For merchants in the European Union:

• We process data under legitimate business interest (B2B wholesale operations)
• Data is stored on secure servers in Europe
• You have the right to access, rectification, erasure, and portability of your data
• You can lodge a complaint with your local data protection authority

← Back to Home | Terms & Conditions