CartRescue (“we”) processes store data solely to provide abandoned-cart recovery, inventory alerts and optional fraud scoring.
Data collected: shop domain, access token (encrypted at rest), order and checkout data required for recovery (email, cart contents, amounts), inventory levels, and optional merchant alert email.
Abandoned-cart reminders are transactional (complete a started checkout). Each email includes a one-click unsubscribe. Promotional content is not added unless the merchant configures it.
We do not sell personal data. Tokens are encrypted. Webhooks are HMAC-verified. GDPR requests from Shopify (customers/data_request, customers/redact, shop/redact) are honored automatically.
Data is retained while the app is installed and deleted on shop/redact or uninstall, except records we must keep for legal billing disputes.
Contact: contact@konnectic.ma