Privacy Policy — CartShrimp

CartShrimp Privacy Policy Last updated: November 6, 2026 1. Introduction CartShrimp ("CartShrimp", "we", "us", or "our") is a software-as-a-service platform operated by LETISAN AMERICA INC., located at 1680 Michigan Ave, Suite 700 #100, Miami Beach, FL 33139, USA. This Privacy Policy explains how we collect, use, store, and protect personal information when you visit cartshrimp.com, register for an account, or use our platform and related services (the "Services"). By using the Services, you acknowledge this Privacy Policy and our Terms and Conditions. Important distinction between Merchants and Shoppers CartShrimp provides technology to businesses ("Merchants") that create and operate sales funnels, stores, landing pages, and checkouts. There are two distinct privacy relationships: A. CartShrimp and Merchants For information collected to manage merchant accounts, subscriptions, billing, support, security, and our own website, CartShrimp generally acts as the data controller. This Privacy Policy governs that relationship. B. Merchants and their Shoppers Merchants independently operate their businesses using CartShrimp technology. Each Merchant is responsible for the personal information collected from visitors and customers ("Shoppers") through its funnels, stores, forms, and checkouts. For Shopper information processed on a Merchant's behalf, the Merchant generally acts as the data controller and CartShrimp acts as a data processor or service provider. Each Merchant is responsible for publishing its own Privacy Policy, providing legally required notices, obtaining applicable consents, and complying with privacy and consumer-protection laws relating to its Shoppers. CartShrimp does not replace the Merchant's Privacy Policy. CartShrimp remains responsible for its own obligations under applicable data protection laws. 2. Information We Collect Depending on how you interact with CartShrimp, we may collect the following categories of information: Account Information Names, email addresses, company names, account credentials, account preferences, team members, and contact information. Billing Information Billing addresses, subscription details, transaction history, invoices, and payment-related information. Payments are processed through third-party payment providers. CartShrimp does not directly store complete payment card numbers. Platform and Integration Information Product catalogs, funnel configurations, uploaded content, connected applications, integration credentials, API tokens, and information necessary to operate the Services. AI and Automation Information Prompts, instructions, product descriptions, images, funnel content, and other information submitted to our AI-powered features, including Shrimpy AI and supported integrations. Technical and Usage Information IP addresses, browser information, device details, usage activity, diagnostic logs, and information about how users interact with our Services. Communications Customer support requests, emails, feedback, and other communications with our team. 3. How We Use Information We use personal information to: • Create, authenticate, and manage Merchant accounts. • Provide and maintain the CartShrimp platform. • Process subscriptions, payments, and billing. • Generate AI-powered content and operate requested features. • Enable integrations with connected third-party services. • Provide customer support and technical assistance. • Monitor security, prevent fraud, and investigate misuse. • Analyze and improve platform functionality and performance. • Communicate important service, account, and billing updates. • Send promotional communications where permitted by law. • Comply with applicable legal, tax, and regulatory obligations. Where the GDPR applies, our legal bases may include performance of a contract, compliance with legal obligations, legitimate interests, or consent, depending on the processing activity. We process Merchant information only for legitimate business purposes and in accordance with applicable privacy laws. 4. Shopper Data and Merchant Responsibilities CartShrimp provides infrastructure that allows Merchants to collect and process information from their Shoppers. Depending on the features enabled by a Merchant, this may include names, email addresses, telephone numbers, shipping addresses, cart details, purchase information, browser identifiers, and other information submitted or generated during a shopping session. Certain features may capture information entered into checkout forms before a purchase is completed, including for abandoned-checkout recovery, analytics, and related functions configured by the Merchant. CartShrimp processes this information to operate the Services on behalf of the relevant Merchant, subject to applicable agreements and legal obligations. Merchants are responsible for: • Publishing accurate Privacy Policies and other required notices on their stores and funnels. • Establishing lawful grounds for collecting and processing Shopper information. • Obtaining required cookie, advertising, and marketing consents. • Complying with applicable children's privacy laws when operating stores or services involving minors. • Responding to Shopper privacy requests and managing their data retention requirements. • Ensuring their use of advertising platforms, email marketing, and connected services complies with applicable laws. Each Merchant must provide and publish its own Privacy Policy and Terms and Conditions within its CartShrimp funnels and connect its own payment processing account, including Stripe where applicable. CartShrimp provides the technology infrastructure but is not the seller or merchant of record for transactions conducted through Merchant funnels. CartShrimp does not independently determine the Merchant's products, marketing strategies, or purposes for collecting Shopper information. CartShrimp does not sell Shopper Data or use Shopper Data processed on behalf of Merchants for CartShrimp's own advertising or marketing purposes. Shoppers wishing to access, correct, or delete personal information collected by a particular store should contact that Merchant directly. We will reasonably assist Merchants with privacy requests as required by applicable law and our data processing agreements. 5. AI Services, Integrations, and Third Parties CartShrimp uses third-party infrastructure, software providers, and AI technologies to operate its platform. These services may include: • Cloud hosting and database providers. • Payment processing and billing providers. • Email delivery and communications services. • AI model and automation providers. • Analytics, security, and technical infrastructure services. • Other services necessary to provide requested functionality. Information may be shared with these providers to the extent necessary to deliver the Services, subject to applicable contractual and privacy safeguards. AI-powered features When Merchants use AI functionality, relevant prompts, content, images, and instructions may be processed by external AI providers. AI providers may have their own data processing and retention arrangements, subject to applicable agreements. Merchant-connected integrations When a Merchant authorizes an external application, AI assistant, MCP client, payment provider, advertising platform, or other integration, information may be exchanged as necessary to perform the authorized functions. The Merchant controls which supported integrations it authorizes and is responsible for reviewing the privacy practices and permissions of independently operated third-party services. CartShrimp is not responsible for the independent data practices of third-party services outside its control, except where applicable law provides otherwise. We may also disclose information where legally required, to protect the security of the Services, or in connection with enforcement of our Terms and Conditions. 6. Cookies and Tracking Technologies CartShrimp may use cookies and similar technologies on its website and dashboard for authentication, security, functionality, analytics, and marketing measurement. Where required by law, we provide appropriate notices, consent choices, and opt-out mechanisms. Users may also manage certain cookie preferences through their browsers. Merchant storefronts and funnels Merchants may enable tracking technologies, including advertising pixels, conversion APIs, analytics tools, and other integrations, through CartShrimp. Each Merchant is responsible for providing legally required disclosures and managing consent for tracking activities conducted through its own stores and funnels. CartShrimp provides technical functionality to support these activities but does not determine the Merchant's independent advertising and data-collection purposes. Where applicable privacy laws grant rights to opt out of the sale or sharing of personal information, CartShrimp will honor those rights for processing activities under its own control. 7. Data Storage, Security, and Retention We implement reasonable technical and organizational safeguards intended to protect personal information against unauthorized access, loss, misuse, or disclosure. These may include access restrictions, secure communications, credential protection, and security monitoring. However, no online service can guarantee absolute security. We retain personal information for as long as reasonably necessary to provide the Services, maintain accounts, fulfill contractual obligations, prevent fraud, resolve disputes, and comply with applicable law. Following account termination, Merchant information and Shopper Data are handled according to our Terms and Conditions, applicable data processing agreements, published retention practices, and legal obligations. Certain information may be retained for legitimate legal, tax, security, backup, or compliance purposes after an account closes. 8. International Data Transfers CartShrimp operates from the United States and may use service providers located in other countries. Accordingly, personal information may be processed or stored outside the country where a Merchant or Shopper is located. Where applicable law requires additional safeguards for international transfers, we use appropriate legal mechanisms, including contractual safeguards such as Standard Contractual Clauses where applicable. 9. Your Privacy Rights Depending on your location and applicable law, you may have rights to: • Request access to your personal information. • Request correction of inaccurate information. • Request deletion of eligible information. • Request a copy or transfer of certain information. • Object to or restrict certain processing activities. • Withdraw consent where processing is based on consent. • Opt out of certain marketing communications or data sharing. To exercise applicable rights relating to information controlled by CartShrimp, contact hello@cartshrimp.com. We may request reasonable identity verification and will respond within the time required by applicable law. Users in the European Economic Area or United Kingdom may also have the right to complain to their competent data protection authority. For personal information collected by an independent Merchant's store or funnel, Shoppers should contact the relevant Merchant directly. 10. Age Requirements CartShrimp accounts are intended for business users who are at least 18 years old. CartShrimp does not knowingly permit individuals under 18 to register as Merchants. Merchants independently determine the audiences, products, and services offered through their stores and funnels. Where a Merchant's business involves children or minors, that Merchant is responsible for complying with applicable children's privacy laws, including any required notices, parental consents, and restrictions on data collection. CartShrimp's own responsibilities as a service provider remain subject to applicable law. 11. Business Transfers If CartShrimp undergoes a merger, acquisition, restructuring, sale, or transfer of operations to another legal entity, personal information and related service records may be transferred to the successor provider as part of the business transition. Such transfers will be conducted in accordance with applicable law and contractual obligations. The successor provider may continue processing information for the purposes described in this Privacy Policy, subject to any legally required notices or additional protections. 12. Changes to This Privacy Policy We may update this Privacy Policy to reflect changes in our Services, technology, business operations, or legal requirements. The most current version will be published on our website with its updated effective date. Where required by applicable law, we will provide additional notice of material changes. Continued use of the Services is governed by the applicable updated policy, subject to any consent or other requirements imposed by law. 13. Contact Information For questions, privacy requests, or concerns regarding this Privacy Policy, please contact: LETISAN AMERICA INC. CartShrimp 1680 Michigan Ave Suite 700 #100 Miami Beach, FL 33139 United States Email: hello@cartshrimp.com Website: https://cartshrimp.com