Privacy

Who we are

CartPolish is run by John Aquino. Questions or requests about your data: john@cartpolish.com.

If we contacted you about your store

We hold business information about online stores we think we can help:

• the store's web address, name, country, category and estimated size
• a business contact email and name, from public sources or business lead databases
• an audit of the store's public pages: speed scores, apps and scripts it loads, product page details and screenshots
• the emails we sent and any replies

We use this to contact you about our Shopify services, which we consider a legitimate business interest. Every email lets you opt out: reply "no" or email john@cartpolish.com and we won't contact you again. We keep your address on a do-not-contact list so it stays that way.

Audit pages

When someone opens an audit page, we record the time, the browser's user agent and a one-way hash of the IP address (never the IP itself), so we know whether the audit was read. Audit pages are not indexed by search engines and set no cookies.

Customers

Payments are handled by PayPal. We receive your name, email, plan and payment status, never your card details. We keep records of the work we do on your store.

Services that process data for us

• Our own server, where this website and our database run
• Instantly, which sends our emails
• Our email provider, which hosts our mailboxes
• Google PageSpeed Insights, which measures store speed (it receives the store's address)
• Anthropic or OpenAI, whose AI helps draft emails from audit results (business data only)
• PayPal, for payments

We don't sell personal data.

How long we keep it

Prospect data is kept while it's useful for contacting the store, and deleted on request. Customer and payment records are kept as long as accounting rules require.

Your rights

You can ask what we hold about you, ask us to correct or delete it, or object to being contacted. Email john@cartpolish.com and we'll reply within 30 days.