CartGenius Logo

CartGenius AI

Privacy Policy

Last updated: September 20, 2026

1. Introduction

This Privacy Policy describes how MitCo ("we", "us", or "our") collects, uses, and protects information through our Shopify application CartGenius AI ("the App"). CartGenius AI is an AI-powered conversational assistant tool that enables Shopify merchants to offer intelligent customer support and shopping assistance to their customers.

By installing and using the App, you ("Merchant") agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Merchant Data

When you install CartGenius AI, we access the following Shopify store data:

  • Store information: shop domain, store name, email address, and locale settings
  • Product data: product titles, descriptions, images, variants, prices, and inventory status to power the AI knowledge base
  • Theme data: theme information necessary to install and manage the chat widget
  • Order data: to assist customers with their orders where applicable

2.2 Customer Data

CartGenius AI processes the following end-customer data:

  • Chat interactions: messages, questions, and responses exchanged with the AI assistant.
  • Cart information: contents of the customer's cart to provide context-aware assistance.
  • Analytics: anonymized interactions and conversion data to provide merchants with performance insights.

2.3 Data We Do NOT Collect

  • Customer personal information (names, emails, addresses, phone numbers) unless explicitly provided by the customer in the chat for support purposes
  • Payment or financial information
  • Customer browsing history outside of CartGenius AI interactions
  • Any data from other Shopify apps installed on the store

3. How We Use Information

We use the collected information to:

  • Provide the AI assistant service: index product data and store information to answer customer queries using AI
  • Assist with shopping: provide relevant product recommendations and support from the merchant's catalog
  • Generate analytics: provide merchants with aggregated, anonymized performance metrics (chat volume, engagement rates, conversion data)
  • Improve the service: enhance AI accuracy and conversational relevance
  • Manage subscriptions: process billing through Shopify's built-in billing system

4. Third-Party Services

CartGenius AI uses the following third-party services to operate:

  • OpenAI API / LLM Providers: used for natural language processing and generating responses. Chat interactions are sent to language model providers for processing. Their privacy policies apply.
  • Cloud Infrastructure: used to store indexed product data for the knowledge base. Data is stored securely in compliance with our cloud provider's security standards.
  • Shopify API: used to access store and product data as authorized by the merchant during installation.

5. Data Storage and Security

  • All data is transmitted over encrypted connections (HTTPS/TLS)
  • Store data indexes are stored with enterprise-grade security
  • Merchant account data is stored on secure servers
  • We implement appropriate technical and organizational measures to protect data against unauthorized access, alteration, or destruction

6. Data Retention

  • Store and Product data: retained as long as the App is installed. Upon uninstallation, all indexed data is deleted within 30 days.
  • Chat interactions: retained for a limited period to provide context and analytics, and then anonymized or deleted.
  • Analytics data: aggregated, anonymized analytics are retained for up to 12 months to provide historical insights.
  • Account data: merchant account information is retained for the duration of the subscription and deleted within 90 days of uninstallation.

7. Data Sharing

We do not sell, trade, or rent any merchant or customer data to third parties. Data is only shared with the third-party service providers listed in Section 4, strictly for the purpose of providing the AI assistant service.

8. Merchant Rights

As a merchant using CartGenius AI, you have the right to:

  • Access: view data associated with your store through the CartGenius AI dashboard
  • Deletion: request deletion of all your data by uninstalling the App or contacting us directly
  • Portability: request an export of your analytics data
  • Restrict processing: disable the chat widget at any time from the dashboard

9. GDPR Compliance

CartGenius AI is designed with privacy by default. We act as a data processor on behalf of the merchant (data controller) in accordance with the EU General Data Protection Regulation (GDPR). We process only the minimum amount of personal data required to provide the service, and we do not use any data for purposes beyond the scope of the App's functionality.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Significant changes will be communicated to merchants via email or through the App dashboard. Continued use of the App after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy or your data, please contact us: