Solidcart Privacy Policy

Privacy Policy - Solidcart

Effective Date: July 29, 2026

Solidcart (“we”, “us”) is a Shopify app, developed by Seventh Triangle Consulting, that lets merchants build and sell product bundles - fixed, mix & match, volume, BOGO, frequently-bought-together, and build-your-own-box - with automatic discount pricing, a storefront widget, and analytics. This Privacy Policy explains what information the app accesses and stores, how we use it, who we share it with, and the choices you have. It applies to merchants who install Solidcart and to the storefront customers whose bundle interactions the app measures.

1. Information we collect

Store & account data. When you install Solidcart, we receive an access token scoped to the permissions you approve during installation, along with your store's myshopify.com domain.

Store catalog data. Using that access, we read the product, collection, order, market, and publication data needed to build and price your bundles, and to power the app's analytics.

App configuration you create. The bundles, bars, discount rules, and cart-transform settings you set up inside the app.

Behavioral analytics. For the Analytics dashboard and funnel features, we also record a customer's Shopify customer ID, customer tags, an anonymous session identifier, and the storefront page URL where a bundle interaction happened - never payment details, and never more than Shopify itself already exposes to an installed app with the granted scopes.

2. How we use information

  • Provide the core service - building and syncing your bundle and discount configuration, applying bundle pricing through Shopify's checkout, and powering the in-store (POS) bundle view.
  • Manage bundle-linked subscription plans, where enabled.
  • Generate the Analytics dashboard (funnel, discount cost, top bundles, and country/tag segments).
  • Maintain, troubleshoot, and secure the app, and respond to your support requests.
  • Comply with our legal obligations and Shopify's platform requirements.

We do not use your data to build advertising profiles, and we do not sell shop or customer data to third parties.

3. Cookies

The storefront widget does not use cookies. To measure how bundles perform (views, add-to-carts, checkouts, purchases) it stores a random, anonymous session identifier in the visitor's browser (localStorage), scoped to your store and expiring automatically after 30 minutes of inactivity - it identifies a visit, not a person, and is never combined with advertising networks or used outside this app's own analytics.

Inside the app's admin screens, our live-chat widget (provided by Tawk.to - see §4) may set its own cookies to support live conversations if you choose to use it.

4. How information is shared

We don't share your shop's or your customers' data with third-party advertisers or data brokers. Data passes only between:

  • Shopify - the platform your store runs on; the app reads and writes bundle, discount, and cart-transform configuration through Shopify's APIs.
  • Our hosting & database providers - where the app and its data are securely stored and processed, acting strictly as data processors on our instruction, never for their own independent use.
  • Tawk.to - provides the live-chat widget available inside the app's admin screens. If you start a chat, the messages and any details you share in it are processed by Tawk.to on our behalf. See Tawk.to's privacy policy for details.

We may also disclose information if required by law or to protect our rights, users, or the public.

5. Data retention & deletion

Shop session data, bundle configuration, and analytics are retained for as long as Solidcart is installed. When you uninstall the app, we automatically remove the automatic discount, cart transform, and bundle metaobject configuration from your store, and delete your shop's stored session data. We also support Shopify's mandatory privacy webhooks: a customer data-erasure request removes that customer's personal identifiers (customer ID, session ID, and page URL) from analytics records tied to your shop, and a shop-erasure request (sent 48 hours after uninstall) deletes all of your shop's remaining data.

6. Your rights

Customers and merchants can request access to, or deletion of, personal data processed by this app through Shopify's standard customer privacy request process - these requests reach us automatically as Shopify webhooks and are handled without needing to contact us directly. You're always welcome to reach out with any privacy question at apps@seventhtriangle.com, and we'll respond within a reasonable timeframe.

7. Security

All communication between the app, your Shopify store, and the storefront widget is encrypted in transit (HTTPS/TLS). We use industry-standard measures to protect data at rest, restrict access to authorized personnel, and store access tokens securely. No method of transmission or storage is 100% secure, but we work to protect your information and to respond promptly to any incident.

8. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we'll revise the "Effective Date" above. Material changes will be communicated through the app or by email where appropriate.