CLAicoso share cart link
Terms of Service← Back to App

Privacy Policy

Last Updated: September 23, 2026 • Effective Date: September 23, 2026

1. Introduction

This Privacy Policy describes how Aicoso share cart link (“we”, “us”, or “our”) collects, uses, and discloses information when merchants install or use our Shopify application, and when customers interact with shareable cart links generated by the app.

By installing the app or using our services, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

A. Merchant Account Information

When a merchant installs Aicoso share cart link from the Shopify App Store, we receive access to certain store-level information via Shopify's official APIs:

  • Shop Identification: Store domain (e.g., your-store.myshopify.com) and primary store currency.
  • Contact Information: Store owner email address provided by Shopify to communicate important service updates.
  • App Configuration Settings: Widget display preferences, button text, color selections, and enabled social channels.

B. Cart Link & Product Information

To create and share cart links, the app stores:

  • Product & Variant Identifiers: Shopify Product IDs, Variant IDs, titles, and selected quantities included in the shared cart.
  • Cart Attributes & Notes: Optional order notes or discount codes attached to the generated cart link.
  • Usage Analytics: Non-personal metrics such as the timestamp of link creation, total times a link is opened, and the referring social platform (e.g., WhatsApp, X, Email).

C. Information We DO NOT Collect

Security Commitment: We never collect, store, or have access to customer payment card details, banking credentials, or personal buyer checkout passwords. All payments and checkout transactions are processed directly and securely by Shopify Checkout.

3. How We Use Collected Information

We use the data collected strictly for legitimate business purposes:

  • To generate unique, fast-loading shareable cart links and restore items on recipient devices.
  • To provide merchants with aggregated performance analytics (link views, top channels, recovery rates).
  • To provide technical support, investigate service issues, and maintain app stability.
  • To comply with legal obligations and Shopify platform requirements.

4. Data Retention, Redaction & GDPR / CCPA Compliance

We fully comply with the European Union General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and Shopify's mandatory Privacy Webhook standards:

  • Customer Data Requests (customers/data_request): Upon receiving an authorized request from Shopify, we respond with any stored customer-associated cart records within statutory timeframes.
  • Customer Redaction (customers/redact): We promptly delete any customer-associated cart interaction records upon notification from Shopify.
  • Shop Redaction (shop/redact): When an app is uninstalled or a merchant requests shop data deletion, all stored store settings, access sessions, and generated links are erased from our database within 48 hours.

5. Data Security & Storage

We implement industry-standard administrative, technical, and physical safeguards:

  • All communications between merchants, storefront visitors, and our servers are encrypted via Transport Layer Security (HTTPS/TLS).
  • Data is housed in secure, access-controlled cloud infrastructure with encrypted storage volumes.
  • We never sell, rent, or trade merchant or customer personal data to third-party data brokers or advertisers.

6. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect operational, legal, or regulatory modifications. Any material revisions will be reflected on this page with an updated “Last Updated” date.

7. Contact Us

If you have any questions, inquiries, or requests regarding this Privacy Policy or your data rights, please contact our team: