Privacy Policy

1Introduction

Scale Cart is a Shopify app that replaces a store's cart with a slide-out cart drawer. The drawer shows shoppers the store's discount codes, reward tiers and product suggestions. This policy explains what information the app handles, for:

• merchants who install Scale Cart on their Shopify store, and
• shoppers who use the cart drawer on a store that has Scale Cart installed.

Scale Cart is operated by ScaleCore. "We", "us" and "our" mean ScaleCore. For shoppers, the merchant decides how their store uses Scale Cart and is responsible for the store's own privacy policy. We act as the merchant's service provider (data processor).

2Information we collect from merchants

When you install Scale Cart, Shopify gives the app access to parts of your store. We keep only what the app needs to work:

Product titles, descriptions and prices are read from Shopify when you search for products in the app. They are held in memory for about a minute and are not saved. We save only product IDs.

We do not receive your payment card details. Shopify handles all payments.

3Information about shoppers

Scale Cart is designed to work without storing anything that identifies a shopper.

• Cart contents. When the drawer is open, it sends the items in the cart (product and variant IDs, quantities and prices) to our server. The server uses them to work out which discount the cart qualifies for. The cart itself is not saved. A short, one-way code made from the cart's items is kept for 5 minutes so the same cart is not checked twice.
• Logged-in status. If the shopper is logged in to the store, Shopify passes their customer ID to our server, so that customer-only discounts can be checked. It is used during that request only. It is never saved or logged.
• IP address. Our server uses the IP address in memory for about 60 seconds to limit abusive traffic. It is not saved or logged.
• Usage counts. The counts described in section 2 contain no name, email, customer ID, IP address, device information or cart contents.

We do not collect shoppers' names, email addresses, phone numbers, postal addresses or payment details.

Plans are priced by the number of orders checked out through the drawer. When a shopper checks out from the drawer, the app adds a hidden marker to the cart, which Shopify copies onto the order. When order counting is active, Shopify notifies the app of paid orders. The app reads only the order ID, the payment status and whether that marker is present, and it saves only the order ID. It never reads the customer's name, address, phone number or email.

4Why we use this information

• To provide the cart drawer, discount display, milestones, upsells and steal deals you set up
• To create and remove the discount codes the app makes for steal deals and milestones
• To bill you for your plan through Shopify
• To show you analytics about how the drawer is used in your store
• To keep the service secure and prevent abuse
• To answer your support requests

5Who we share it with

We share information only with the services that run Scale Cart:

These providers may process data outside your country, including in the United States.

We may disclose information if the law requires it, for example in response to a valid court order.

6How long we keep it

7Your rights

Depending on where you live, you may have the right to:

• access the personal information we hold about you,
• correct it,
• delete it,
• object to or restrict how we use it, and
• receive a copy in a portable format.

Merchants can exercise these rights by emailing support@scalecore.in. We may ask you to confirm that you own the store before we act.

Shoppers should contact the store they shopped with. Shopify forwards shopper data requests and deletion requests to us automatically. Because Scale Cart stores no information that identifies a shopper, there is normally nothing for us to return or delete.

If you are in the EEA, the UK or Switzerland, you can also complain to your local data protection authority.

We will not treat you differently for exercising any of these rights.

8How we protect it

• All traffic to and from the app is encrypted with HTTPS.
• Requests from storefronts are verified with Shopify's signature, and requests from the admin are verified with Shopify session tokens.
• The database requires credentials that only the app holds, and its traffic is encrypted.
• Our logs hide credentials and tokens, and never contain cart contents, customer IDs or IP addresses.

No system is perfectly secure. If we learn of a breach that affects your information, we will tell you without undue delay.

9Cookies and browser storage

It uses the browser's session storage, which is cleared when the tab closes, for two things:

• a copy of the store's drawer settings, so the drawer opens quickly, and
• a timestamp, so the drawer can open after a page reload when a product was just added.

Neither contains personal information.

10Changes to this policy

We may update this policy when the app changes. The date at the top shows the latest version. If a change significantly affects how we use your information, we will tell merchants in the app or by email before it takes effect.

11How to reach us