Catalog to Cart - Privacy Policy

Effective Date: 28th November, 2024

Last Updated: 1st September, 2026

This Privacy Policy describes how the Catalog to Cart - Shoppable PDF app ("the App") handles information when merchants install it on their Shopify store, and when shoppers view a published catalog on the storefront.

1. Information We Do NOT Collect

The App does not collect, store, or process any personal data belonging to shoppers or store customers.

Specifically, we do not collect:

• Customer names, email addresses, phone numbers, or addresses
• Customer accounts, orders, or order history
• Payment or card information
• Shopper browsing behaviour or shopping sessions

Shoppers who view a catalog are never identified, profiled, or tracked across apps or services.

2. Merchant Information We Store

To run the App, we store the information Shopify provides when a merchant installs it: the store domain, store name, store owner name and email address, and a secure access token used to connect to the store.

This is merchant account information. It is used only to operate the App, identify your store, and respond to support requests.

3. Your Catalog Content Stays in Your Store

Uploaded PDFs, generated page images, hotspot positions, and design settings are stored in your own Shopify account - in your Files library and store metafields - not on our servers. You control and can delete them from your Shopify admin at any time.

Product details shown in catalog tooltips are read from your store through Shopify's APIs as needed, and are not copied into a separate database.

4. Permissions We Request

The App requests access to products (to display them in catalog hotspots), files (to store catalog PDFs and page images), and themes and script tags (to show the catalog viewer on your storefront).

The App does not request access to customers, orders, or payment data.

5. Third-Party Services and Sharing

We do not sell, rent, or share any data with advertisers, data brokers, or marketing services.

No shopper or customer personal data is shared with any third party.

The App relies on standard infrastructure and email providers strictly to host the service and to send install, uninstall, and support-request notifications. The only information involved is basic merchant account information (store name, domain, owner name and email). 

6. Cookies, Tracking & Payments

The App does not use advertising cookies, tracking pixels, or third-party analytics trackers on your storefront. It uses only the session cookies Shopify requires to keep merchants signed in to the embedded admin.

All subscription payments are handled by Shopify Billing. We never see or store payment details.

7. Data Retention and Your Rights

Merchant session data and access tokens are deleted when the App is uninstalled. Catalog content remains in your own Shopify account under your control.

We respond to Shopify's customers/data_request, customers/redact, and shop/redact compliance webhooks. As the App stores no customer personal data, there is no customer data to return or erase.

You may request access to, correction of, or deletion of the merchant information we hold by contacting us.

8. Changes & Contact

We may update this Privacy Policy to remain compliant with Shopify or applicable law. Updated versions will always be posted at this URL with a revised date.

Still, if you have questions, you can contact us at:

Email: support@cartmade.com