LEGAL

Privacy

Last updated: June 2026

What we collect from merchants

Your account email and store domain, the product catalog you sync (titles, descriptions, categories, prices, stock status, image URLs and product URLs), and billing records handled by Stripe. We never see or store full card numbers.

What we send to AI providers

To tag products and compose looks, we send product titles, descriptions, store categories and product images to the AI provider configured for your account (e.g. Anthropic or Google). These requests contain catalog data only — never shopper data, account credentials or billing information.

AI providers process this data to return attributes and look selections; we store the results (tags and looks) in your account.

What we never collect

Shopper personal data. The storefront widget requests looks by product ID and your public key only — no cookies, no fingerprinting, no shopper profiles. Recommendations are product-to-product.

Storage & isolation

Catalog data and looks are stored in our database with per-tenant row-level isolation. API keys are stored as salted hashes; the full key is shown once and never persisted.

Deletion

Disconnecting the plugin or revoking your API keys stops all syncing immediately. Contact us to delete your account and all associated catalog data.

Contact

Questions about this policy: privacy@cartstylist.com.