Legal
Privacy Policy
Last updated: August 18, 2026
Cartrella is a Shopify application suite operated by Perizer Corp. (“Perizer”, “we”). This policy describes what we collect when a merchant installs Cartrella, why we collect it, and the rights merchants and their customers have.
What we collect
From merchants (our customers)
- Store information — your shop domain and the API access credentials Shopify issues at install, used solely to operate the features you enable.
- Product and configuration data — the products you include in packs, pack sizes and prices, and publish state.
- Order data (read-only, transient) — with your approval we read recent orders to compute sales metrics (pack revenue, attach rate) shown in your dashboard. Order contents are processed in memory and not stored by Cartrella.
- Review invitations (transient) — when an order is fulfilled, we queue one review invitation using the order’s email address and first name. Customers who have unsubscribed from the store’s emails are never invited. Both fields are deleted the moment the email is sent; only the fact that an invitation went out is retained.
- Billing state — your subscription plan, managed and charged entirely by Shopify Billing. We never see payment details.
From your customers (shoppers)
Cartrella’s storefront components display pack options and add items to the cart. They set no cookies, run no analytics, and send no shopper personal data to Cartrella. Checkout pricing runs inside Shopify’s checkout on Shopify’s infrastructure.
What we don’t do
- We do not sell or share data with third parties for advertising.
- We do not store shopper personal information.
- We do not use your data to train machine-learning models.
Where data lives
Cartrella runs on ComputeSphere (a Perizer platform) with data stored in Microsoft Azure data centers in the United States, encrypted in transit and at rest.
Data deletion
- Uninstall — access credentials are invalidated and shop-scoped data is deleted.
- GDPR requests — we implement Shopify’s mandatory privacy webhooks (customer data request, customer redact, shop redact). Because we store no shopper personal data, customer requests complete trivially; shop redaction removes all remaining shop-scoped records.
Your rights
Depending on your jurisdiction (including GDPR and CCPA), you may have rights to access, correct, export, or delete personal data. Contact us and we’ll respond within 30 days.
Contact
[email protected]
Perizer Corp., Texas, USA