Privacy notice

Last updated: October 11, 2026. EasyCart is operated by EasySelling. This notice describes the current app implementation.

Information we use

We use your shop domain, Shopify authorization tokens, granted scopes and session metadata to authenticate your store. Session metadata can include an administrator's name, email, user ID, locale and account role. We store cart settings, configuration history, and optional AI connection metadata and proposed changes. AI connection tokens are stored as hashes.

We access products and collections to configure recommendations. We do not request access to customer profiles or orders. Shopper cart contents are read in the shopper's browser through Shopify's cart interfaces; this app does not store those contents in its backend database. Cart notes and discount codes are sent to Shopify.

Installation requires product-read, discount-management and checkout-validation permissions. Reward modules remain optional. When you activate rewards, we create app-owned checkout rules and store their configuration in Shopify. Shopify executes these rules to apply free gifts and eligible delivery discounts and to prevent unintended charges for complimentary gifts. The browser stores declined gift identifiers for the current tab session.

We read your shop's EasyCart subscription, trial and billing-period dates from Shopify to determine whether the app is available. Shopify manages plan approval and billing; EasyCart does not collect payment-card details. The storefront receives only a short-lived activation result, without your subscription or billing details.

How it is used and shared

We use this information to operate EasyCart, save settings, authenticate requests and support the merchant. Shopify serves the storefront extension and processes checkout. Our hosting and database providers process backend data to run the service. Infrastructure providers may process connection details such as IP addresses and diagnostic logs under their policies. We do not sell app data or use it for advertising.

Optional AI connections

Connections are created by the merchant. A connected client can access store settings and selected product and collection results, and submit configuration proposals. Your selected AI service may receive this information under its privacy policy. EasyCart does not choose a provider or transmit customer/order records through this connection. Connections expire after 30 days and can be revoked earlier; proposal validity expires after seven days.

Storage, retention and security

Sessions and app records are retained while needed to operate the installed app. Expired connection and proposal records may remain until uninstall or a deletion request. Uninstall and Shopify shop-redaction webhooks delete the store's sessions, AI connections, proposals and local configuration history. Data stored inside Shopify is governed by Shopify's retention policies. Infrastructure backups and logs may have separate retention periods under provider policies. Backend transfers use HTTPS; the cloud database connection requires TLS.

Your choices and requests

Disable the theme embed to stop storefront display. Revoke AI connections in AI Studio, or uninstall to withdraw Shopify access. Contact us for access, correction or deletion of app records. We verify that the requester is authorized for the store before sharing or deleting records.

Privacy contact: easysellingservice@gmail.com.