Privacy Policy

Last Updated: May 15, 2025

1. Introduction

CartSignal ("we," "our," or "us") is committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you visit our website cartsignal.net, use our platform, or interact with our services, including our WhatsApp Business API integration and related tools (collectively, the "Services").

By accessing or using our Services, you consent to the data practices described in this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use our Services.

2. Information We Collect

2.1 Information You Provide Directly

We collect information that you voluntarily provide to us when you:

• Register for an account or create a profile
• Subscribe to our services or purchase a plan
• Fill out a contact form or request a demo
• Communicate with us via email, phone, or WhatsApp
• Participate in surveys, promotions, or events

This information may include:

• Full name, email address, phone number
• Company name, job title, and business address
• Billing information and payment details (processed securely by third-party payment processors)
• WhatsApp Business account information
• Any other information you choose to provide

2.2 Information Collected Through Our Platform

When you use our Services, we may collect:

• E-commerce data from your connected store (cart data, product information, order history) as necessary to provide cart recovery and marketing automation services
• WhatsApp message delivery and engagement data (delivery status, read receipts, response data)
• Campaign performance metrics (open rates, click rates, conversion data)
• Customer contact information provided by you for the purpose of sending WhatsApp messages on your behalf

2.3 Information Collected Automatically

When you access our website or Services, we automatically collect certain information, including:

• Device information (device type, operating system, browser type)
• Log data (IP address, access times, pages viewed, referring URL)
• Usage data (features used, actions taken within the platform)
• Cookies and similar tracking technologies (see Section 7)

2.4 Information from Third Parties

We may receive information about you from third parties, including:

• Meta (Facebook/WhatsApp) when you connect your WhatsApp Business account
• E-commerce platforms (Shopify, WooCommerce, etc.) when you integrate your store
• Analytics providers and advertising partners

3. How We Use Your Information

We use the information we collect for the following purposes:

• Providing Services: To deliver, maintain, and improve our WhatsApp Business API solutions, cart recovery, marketing automation, and customer engagement tools
• Account Management: To create and manage your account, process transactions, and provide customer support
• Communication: To send you service-related notifications, updates, security alerts, and administrative messages
• Marketing: To send you promotional materials and information about our products and services (with your consent, where required by law)
• Analytics: To analyze usage patterns, measure the effectiveness of our Services, and improve user experience
• Compliance: To comply with legal obligations, enforce our terms of service, and protect against fraud or security threats
• WhatsApp Messaging: To facilitate the sending and receiving of WhatsApp messages on behalf of our clients to their end customers, in accordance with Meta's WhatsApp Business API policies

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

• Service Providers: With trusted third-party service providers who assist us in operating our platform, processing payments, hosting data, and providing customer support. These providers are contractually obligated to protect your information
• Meta/WhatsApp: With Meta Platforms, Inc. as required for the operation of the WhatsApp Business API. This includes message content, delivery data, and business account information necessary to facilitate messaging
• E-commerce Platforms: With connected e-commerce platforms as necessary to provide cart recovery and automation services
• Legal Requirements: When required by law, regulation, legal process, or governmental request
• Business Transfers: In connection with a merger, acquisition, or sale of all or a portion of our assets
• With Your Consent: When you have given us explicit consent to share your information

5. Data Retention

We retain your personal information for as long as necessary to provide our Services, comply with legal obligations, resolve disputes, and enforce our agreements. Specifically:

• Account Data: Retained for the duration of your account and up to 30 days after account closure
• Transaction Data: Retained for up to 7 years as required by tax and financial regulations
• Message Data: WhatsApp message content and delivery data is retained for up to 90 days unless longer retention is required by applicable law
• Analytics Data: Aggregated and anonymized data may be retained indefinitely for analytical purposes

6. Data Security

We implement industry-standard security measures to protect your personal information, including:

• Encryption of data in transit (TLS 1.2+) and at rest (AES-256)
• Regular security audits and vulnerability assessments
• Access controls and authentication mechanisms
• Secure data centers with physical security measures
• Employee training on data protection and security best practices

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our website. These include:

• Essential Cookies: Required for the website to function properly (session management, security)
• Analytics Cookies: Help us understand how visitors interact with our website (Google Analytics)
• Functional Cookies: Remember your preferences and settings
• Marketing Cookies: Used to deliver relevant advertisements (with your consent)

You can control cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of our website.

8. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal information (see our Data Deletion page)
• Portability: Request a copy of your data in a structured, machine-readable format
• Restriction: Request that we restrict processing of your information
• Objection: Object to the processing of your information for specific purposes
• Withdraw Consent: Withdraw previously given consent at any time

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.

9. GDPR Compliance (European Economic Area)

If you are located in the European Economic Area (EEA), the following additional provisions apply:

• We process your data based on legitimate business interests, contractual necessity, legal obligations, or your consent
• You have the right to lodge a complaint with your local Data Protection Authority
• We will not transfer your data outside the EEA without appropriate safeguards (Standard Contractual Clauses or adequacy decisions)

10. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• The right to know what personal information is being collected about you
• The right to know whether your personal information is sold or disclosed and to whom
• The right to opt-out of the sale of personal information (we do not sell personal information)
• The right to request deletion of your personal information
• The right to non-discrimination for exercising your privacy rights

11. Children's Privacy

Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information promptly.

12. Third-Party Links

Our website and Services may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party websites you visit.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on our website with a new "Last Updated" date. Your continued use of our Services after such changes constitutes your acceptance of the updated Privacy Policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

For data deletion requests, please visit our Data Deletion page or email us at [email protected].