1. Introduction
This Privacy Policy explains how Cart Sync ("we", "our", or "us") collects, uses,
and processes personal information, including information belonging to California
residents, in accordance with the California Consumer Privacy Act (CCPA) and the
California Privacy Rights Act (CPRA). Cart Sync functions as a “Service Provider”
under the CCPA/CPRA, processing personal information solely on behalf of our
customers (“Businesses”) for permitted business purposes.
Our services optimize server-side Pixel data, sync events, and improve ad performance.
This policy is provided for informational purposes only and does not constitute legal advice.
Businesses using Cart Sync remain responsible for ensuring their own CCPA/CPRA compliance.
2. Categories of Personal Information We Collect
As a Service Provider, we collect and process personal information only as instructed by our customers.
The categories of data we may collect include:
-
Account Information: Name, email address, billing information,
and login credentials provided when you create or manage your Cart Sync account.
-
Meta Advertising Data: Campaigns, Ad Sets, Ads, and performance insights accessed
through the Meta Marketing API for the purpose of optimization.
-
Server-Side Pixel Event Data: IP addresses, user agents, device/browser data,
event actions, and hashed identifiers (e.g., hashed email) used to enhance Meta’s event match quality.
-
Automatically Collected Technical Data: Log files,
API usage metadata, authentication tokens, and system diagnostics.
-
Sensitive Personal Information (SPI):
Cart Sync does not intentionally collect or record SPI such as financial credentials,
government IDs, or precise geolocation, and Businesses should not transmit such data to us.
3. Business Purpose for Data Processing
Under CCPA/CPRA, Cart Sync processes personal information strictly for “Business Purposes”
on behalf of the customer. These include:
- Optimizing Meta ad performance and event match quality.
- Enhancing server-side pixel accuracy and event delivery.
- Automating bid rules, pausing underperforming ad sets, and improving ROAS.
- Providing analytics dashboards and performance reporting.
- Maintaining platform functionality, security, and service reliability.
Cart Sync does not:
- Sell or share personal information with third parties.
- Use personal information for advertising or profiling unrelated to our services.
- Combine customer data with other datasets except to improve service performance as permitted by CPRA.
- Use or retain data beyond what is necessary to provide our services.
4. California Consumer Rights
Under the CCPA/CPRA, California residents have the right to:
- Right to Know: Access the categories and specific pieces of personal information collected over the past 12 months.
- Right to Delete: Request deletion of personal information, subject to service-related exceptions.
- Right to Correct: Request correction of inaccurate personal information.
- Right to Opt-Out of Sale/Sharing: Cart Sync does not sell or share personal data, but Businesses must meet this requirement independently.
- Right to Limit the Use of Sensitive Personal Information: We do not use SPI beyond operational requirements.
- Right to Non-Discrimination: We will not deny service or offer different pricing for exercising privacy rights.
Because Cart Sync is a Service Provider, end users of your store must submit
privacy requests directly to the Business (you). Upon receiving a valid request from the Business,
Cart Sync will assist in fulfilling the request, such as deleting user-level data or providing access logs.
6. Contact Us
If you have questions about this Privacy Policy or wish to submit a CCPA/CPRA-related request,
please contact our privacy team at:
privacy@cartsync.org