Shopify App Store

Privacy policy

CAPITALIPLY LLC · Last updated: September 2, 2026

Commitment to Privacy

At CAPITALIPLY LLC (“we,” “us,” or “our”), we are committed to respecting your privacy and safeguarding your personal information. This Privacy Policy explains how we collect, use, process, and protect your personal information when you:

  • Use our Cartly Pro application (the “App”).
  • Visit our website at https://cartly-pro.com.
  • Interact with us through any of our related services (collectively referred to as “the Services”).

This Privacy Policy is designed to help you understand:

  • The types of data we collect and process.
  • How and why we use this data.
  • Your rights regarding your personal information.
  • The measures we take to protect your data.

We value your trust and aim to provide transparency about our privacy practices. If you have any questions or concerns, please refer to the Contact Information section below.

Applicability of This Privacy Policy

This Privacy Policy applies specifically to Cartly Pro, which is developed, managed, and operated by CAPITALIPLY LLC, a limited liability company registered in the State of Delaware, United States. Each of our applications is governed by its own Privacy Policy; this document covers Cartly Pro only.

It governs how we collect, use, and protect personal information when you interact with the App and our related services. However, this Privacy Policy does not apply to:

  • Ecommerce platforms: data collection by platforms such as Shopify, which operate under their own privacy policies.
  • Merchants: the practices of merchants who use the App to run their own businesses.
  • Third-party services: integrated third-party services and tools that you or a merchant choose to connect.

Information We Process Through Cartly Pro

Cartly Pro is a Shopify application that provides a customizable cart drawer and slide cart, together with upsell, cross-sell, free-shipping progress, and other cart conversion features for merchants’ online stores.

To provide this functionality, the App processes the following categories of information:

Merchant and Store Information

  • Store and account information: your Shopify store name and domain, store ID, primary contact name and email address, store address, currency, language, timezone, plan level, and installation and uninstallation events.
  • Catalog configuration data: products, variants, collections, prices, inventory information, and images required to display cart, upsell, and recommendation content.
  • Cart and offer settings: cart drawer design and layout settings, upsell and cross-sell rules, rewards and shipping-goal thresholds, announcement text, translations, and custom code or styling you configure in the app.
  • Billing information: subscription plan, charge status, and billing history. Payments for the app are processed by Shopify, and we do not receive or store your full payment card details.
  • App usage data: administrative actions inside the app, feature usage, settings changes, log records, and diagnostic or error data.

Storefront and End-Customer Information

When a merchant installs the App, the App may process information about visitors to and customers of that merchant’s store, including:

  • Cart activity: cart contents, cart tokens, quantities, subtotals, currency, applied discount codes, and items added or removed through the cart drawer.
  • Offer interaction data: impressions, clicks, and acceptances of upsell, cross-sell, and reward offers, as well as cart drawer opens and closes.
  • Order data: order and line-item information used to attribute revenue to cart features and to report on their performance.
  • Technical and device data: IP address, browser and device type, operating system, referring page, storefront language and currency, and anonymous or pseudonymous session identifiers.

Cartly Pro does not require end-customer names, email addresses, phone numbers, or payment details in order to function. Where such information is present in order records made available to us by Shopify, we process it only as described in this Privacy Policy and on the instructions of the merchant.

Importance of Reviewing This Policy

It is essential to review this Privacy Policy before engaging with our services. By installing or using the App, visiting our website, or providing personal information, you acknowledge that you have read and understood the privacy practices described here. Your use of the App is separately governed by our Terms of Service.

If you do not agree with any aspect of this Privacy Policy, we strongly advise you to refrain from:

  • Installing or using the App.
  • Visiting our website.
  • Sharing any personal information with us.

Changes to This Privacy Policy

Update Notification Process

We may revise this Privacy Policy periodically to reflect changes in our business practices, legal requirements, or operational needs. When updates are made, we will:

  • Post the updated Privacy Policy on our website at https://cartly-pro.com.
  • Update the “Last updated” date at the top of this document.

For significant changes that affect your rights or how we handle your data, we will provide advance notice as required by applicable law. Notification methods may include:

  • Prominent notices displayed within the App or on our website.
  • Direct communication via email or other channels, sent at least 30 days before the changes take effect.

How We Collect and Use Your Personal Information

Categories of Information Collected

The types of personal information we collect depend on how you interact with the App, our website, and our services. In addition to the App-specific categories described above, the categories of information we may collect include:

  • Contact information: your name, email address, phone number, and mailing address.
  • Account information: login credentials, account settings, and other data required to manage your user account.
  • Service usage data: details about your interactions with the App and our website, including navigation, feature usage, and session activity.
  • Customer support data: information provided when you contact us for support, such as the content of your messages and any additional data needed to resolve inquiries.

We do not knowingly collect, sell, or share personal data from children under 18 years of age. If we learn that a child under 18 has submitted personal information without parental or guardian consent, we will take reasonable measures to remove or delete such information as soon as possible. If you believe a child has provided us with personal data, please contact us at support@cartly-pro.com.

Sources of Data

We collect personal information through various means, including:

  • Direct input: information you provide when installing the App, registering an account, making a purchase, or interacting with our services.
  • Cookies and tracking technologies: automatically collected data from your use of our website or the App, such as IP address, browser type, device information, network connection details, and other engagement-related data.
    • The specific cookies and similar technologies we use, their purposes, their duration, and how to manage them are described in our Cookie Policy.
  • Third parties: data obtained from external sources, such as Shopify, analytics providers, and advertising platforms, when you engage with our services through their systems.

Where We Process Data

Our data processing and operational activities take place in various locations to support the functionality of the App and our services. Our primary servers and systems are hosted in the United States, and our company is established in the United States.

If you are located outside the United States, please be aware that your data may be transferred to, stored, and processed in the United States and in other countries where we or our service providers operate. Additionally, your information may be subject to access requests from governments, courts, or law enforcement agencies under applicable laws.

If we receive personal information from the European Economic Area (EEA), the United Kingdom, or Switzerland, we will ensure that appropriate safeguards are in place in accordance with the General Data Protection Regulation (GDPR) and equivalent laws.

This may include:

  • Relying on recognized transfer mechanisms, such as:
    • The European Commission’s Standard Contractual Clauses (SCCs), and the UK International Data Transfer Addendum where applicable.
    • Binding Corporate Rules (BCRs).
    • Other legally approved safeguards, including any applicable certification under the EU–U.S. Data Privacy Framework.
  • Carrying out transfer impact assessments and applying supplementary technical and organizational measures where required.
  • Ensuring that onward transfers only occur where the destination country has an adequacy decision from the European Commission, or where an equivalent level of data protection is provided through appropriate safeguards.

How the Data Is Used

We use the personal information we collect for the following purposes:

  • Service delivery: to provide, operate, and maintain the App and our services, including processing transactions, managing accounts, and delivering updates or notifications. For this type of data processing, we rely on the performance of a contract to which you are a party (for example, our Terms of Service).
  • Security and fraud prevention: to protect our systems and users from unauthorized access, fraud, or other harmful activities. For this type of data processing, we rely on our legitimate interest in ensuring compliant usage of our products and services.
  • Customer support: to respond to inquiries, resolve issues, and improve the overall user experience. For this type of data processing, we rely on our legitimate interest in assisting customers efficiently.
  • Product improvement and analytics: to understand how the App is used, diagnose problems, and develop new features. For this type of data processing, we rely on our legitimate interest in improving our products, and we use aggregated or anonymized data wherever possible.
  • Marketing and advertising: to send promotional communications via email, text, or postal mail, and to display advertisements to merchants and prospective merchants. This may include tailoring our services and advertising based on your interactions. For this type of data processing, we rely on your consent where consent is required by applicable law, and otherwise on our legitimate interest in promoting our services.
  • Legal compliance: to meet applicable legal, regulatory, or contractual obligations, such as responding to lawful requests or enforcing our Terms of Service. For this type of data processing, we rely either on the performance of a contract (for example, enforcing our Terms of Service) or on our legal obligations (for example, responding to lawful requests).

We are committed to using your personal information responsibly and in ways that respect your rights while enhancing your experience with our services.

How We Disclose Personal Information

We share personal information with third parties only as necessary to provide our services, comply with legal obligations, or fulfill other legitimate purposes as outlined in this document. Below is an overview of the types of disclosures we may make and the parties involved.

Service Providers

We engage trusted service providers to perform essential functions on our behalf, including:

  • IT management and infrastructure services.
  • Payment processors for secure transaction handling.
  • Data analytics platforms to improve and optimize our services.
  • Customer support tools and teams to assist with inquiries and issues.
  • Cloud storage providers to securely store and manage data.
  • Email and messaging providers used to deliver transactional and notification messages.

These providers process your personal information solely in accordance with our instructions and applicable data protection laws, and are bound by written agreements requiring appropriate confidentiality and security measures.

Partners

We collaborate with partners and platforms, such as:

  • Ecommerce platforms: for example, Shopify, which enables the functionality of the App.
  • Advertising networks: to deliver targeted advertisements, measure campaign effectiveness, and support marketing efforts.
  • Integration partners: third-party services that enhance the functionality of the App, including customer support and additional product development.

These entities process information according to their own privacy policies, and we encourage you to review them.

Enforcement and Regulatory Bodies

We may disclose personal information to comply with legal or regulatory requirements or in the context of business operations, including:

  • Responding to lawful requests, such as subpoenas or court orders.
  • Enforcing our Terms of Service or other agreements.
  • Protecting the rights, safety, and property of users, employees, or others.
  • Facilitating mergers, acquisitions, or other business transactions (for example, bankruptcy proceedings).

Affiliates

We may disclose personal information to our affiliates for legitimate business interests, including:

  • Managing our operations efficiently.
  • Facilitating mergers or bankruptcy proceedings.
  • Complying with legal obligations.
  • Enforcing our Terms of Service.
  • Protecting the rights of our users or others.

Your Choices

You can opt out of the sale or sharing of your personal information, and of targeted advertising, at any time by:

  • Contacting us directly.
  • Following the instructions in the Your Rights and How to Exercise Them section.

Your Rights and How to Exercise Them

Overview of User Rights

Depending on your location and applicable privacy laws, you may have the following rights regarding your personal information:

  • Right to access / know: request access to the personal information we hold about you, including how we use and share it.
  • Right to delete: request the deletion of personal information we maintain about you.
  • Right to correct: request corrections to inaccurate or incomplete personal information.
  • Right to data portability: request a copy of your personal information in a portable format or have it transferred to another party.
  • Right to restrict processing: request limitations on how your personal information is processed in certain circumstances.
  • Right to withdraw consent: if we rely on your consent to process your personal information, you can withdraw it at any time. For information on how to withdraw your consent for marketing communications (“opt-out”), please refer to the Managing Communication Preferences section of this document.
  • Right to object: you have the right to object to the processing of your personal information in certain situations, including when processing is based on legitimate interests or for direct marketing purposes. If you object, we will assess your request and stop processing your data unless we have compelling legitimate grounds to continue or the processing is required for legal claims.
  • Right to opt out of sale, sharing, or targeted advertising: where applicable law provides it, you may direct us not to sell or share your personal information and not to use it for targeted advertising or profiling in furtherance of decisions that produce legal or similarly significant effects.
  • Right to non-discrimination: we will not deny you services, charge you different prices, or provide you a different level of service because you exercised your privacy rights.
  • Right to lodge a complaint with a supervisory authority: if you believe that your personal information has been processed unlawfully or your rights have been violated, you have the right to file a complaint with the appropriate data protection or consumer protection authority in your jurisdiction. However, we encourage you to contact us first so that we can try to resolve your concerns.
  • Right not to be subject to automated decision-making, including profiling: you have the right not to be subject to decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects on you. If such processing occurs, you may request human intervention, express your viewpoint, and contest the decision.

End customers of merchants who use the App should direct their privacy requests to the merchant they interacted with, as the merchant is the controller of that data. If we receive such a request directly, we will forward it to the relevant merchant and assist them in responding.

Managing Communication Preferences

You can opt out of promotional emails at any time by clicking the “unsubscribe” link included in our emails. Please note that non-promotional emails related to your account or transactions may still be sent.

Steps to Exercise Your Rights

Submit a request

Verification process

  • We may ask for information to verify your identity, such as your email address, store domain, or account details.
  • If you designate an authorized agent to act on your behalf, we will require proof of authorization and may also verify your identity directly.

Response Timeline

We strive to respond to all valid requests promptly, and in any event within the timeframe required by applicable law (generally within 30 days, or 45 days under certain United States state privacy laws, with extensions where permitted).

Appeals

If your request is denied, you may appeal the decision by replying directly to our response or contacting us at support@cartly-pro.com.

Contact Information for Requests

If you have questions about your rights or need assistance with submitting a request, you can contact us using the details below:

Email: support@cartly-pro.com

Mail:

CAPITALIPLY LLC
2810 N Church St PMB 873907
Wilmington, Delaware 19802
United States

We are committed to protecting your privacy and ensuring your concerns are addressed promptly.

Retention of Your Information

Retention Periods by Data Type

The length of time we retain your personal information depends on the purpose for which it was collected and relevant legal, regulatory, and operational requirements.

Below are examples of typical retention periods:

  • Transactional data: retained for up to 10 years to comply with financial record-keeping regulations. Please note that the retention period for transactional data depends on the applicable jurisdiction and its respective tax laws.
  • Account information: retained as long as your account is active or as necessary to enforce our Terms of Service.
  • Customer support records: retained for up to 3 years following the resolution of an inquiry or issue.
  • Usage data: retained for analytics and research purposes, typically for up to 2 years, unless anonymized.

Cartly Pro Data

Cart drawer and offer configuration data is retained for as long as the app is installed on your store and for up to 90 days after uninstallation so that your setup can be restored if you reinstall. Cart-level analytics events are retained for up to 24 months and are then deleted or aggregated into non-identifiable statistics.

Data Deletion

When your personal information is no longer required for the purposes outlined in this Privacy Policy, we will either delete or anonymize it to ensure compliance with applicable laws. Merchants may also request deletion of their store data at any time using the contact details in this Privacy Policy.

Data Controller and Data Processor Roles

As the developer and provider of the App, we act as both a data controller and a data processor, depending on the type of data involved.

Data Controller

We act as the data controller for information relating to Shopify merchants’ use of the App, including data on how merchants interact with and configure the App.

  • In some cases, we may determine how certain end-customer data uploaded by merchants is used.
  • We may use some data to work with trusted partners to provide advertising or personalization services.
  • All such activities are conducted in compliance with applicable laws, with appropriate safeguards and transparency measures in place.
  • Merchants are encouraged to ensure that their privacy notices reflect relevant practices and that they meet their legal obligations regarding the collection and use of end-customer data.

Data Processor

For any personal data uploaded by merchants to the App, including end-customer data, we act as a data processor. This means:

  • We process such data solely on behalf of merchants and according to their instructions, to enable them to use the App’s features and functionalities.
  • We do not use or share end-customer data for any purposes other than those authorized by merchants, required by law, or described in this Privacy Policy.
  • As a data processor, we are committed to implementing appropriate technical and organizational measures to protect end-customer data.
  • We assist merchants in complying with their data protection obligations under applicable laws, including responding to data subject requests and reporting security incidents.
  • Merchants remain responsible for obtaining any necessary consents from their end customers and ensuring that their privacy practices align with their legal responsibilities.

If you have further questions about how we handle your merchant or end-customer data, please contact us using the information provided in this document.

How We Protect Your Information

We maintain technical and organizational measures designed to protect personal information against unauthorized access, disclosure, alteration, and loss. These measures include encryption of data in transit, access controls and authentication for our systems, restriction of access to personal data on a need-to-know basis, logging and monitoring, and regular review of our security practices. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we become aware of a security incident affecting your personal information, we will notify you and the relevant authorities as required by applicable law.

Complaints

At CAPITALIPLY LLC, we strive to address your concerns and resolve any issues related to your personal information. This section outlines the steps you can take if you have complaints about our data handling practices and how to escalate concerns if they remain unresolved.

Escalation Process for Unresolved Concerns

If you have questions or concerns about how we handle your personal information, we encourage you to contact us directly so we can address the matter promptly. You can reach us through:

Email: support@cartly-pro.com

We are committed to resolving your issues efficiently and transparently. If you are not satisfied with our response, you have the right to escalate your complaint. Depending on your jurisdiction, this may involve contacting the relevant data protection authority, your state attorney general, or seeking legal recourse.

Contact Information

For any questions about this Privacy Policy or our privacy practices, please contact us at:

Effective Date

This Privacy Policy is effective as of the Last updated date shown above and supersedes any previous versions applicable to Cartly Pro.

Start selling more with smart cart drawers

Join thousands of merchants using Cartly to boost sales and increase AOV with cart drawers.