Privacy Policy

1. Introduction

BomboCart ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Shopify application for abandoned checkout recovery via SMS messaging.

2. Information We Collect

2.1 Merchant Information

When you install BomboCart, we collect:

• Your Shopify store information
• Contact details
• Billing information

2.2 Customer Information

Through your Shopify store, we process:

• Phone numbers of customers who abandon checkouts
• SMS consent status
• Checkout information (products, pricing)
• Message history

3. How We Use Your Information

3.1 Merchant Information

• To provide and maintain our service
• To process payments
• To send administrative communications
• To improve our service

3.2 Customer Information

• To send abandoned checkout recovery SMS messages
• To track consent and opt-out requests
• To measure effectiveness of recovery messages
• To calculate recovery metrics

4. Data Retention

We retain customer personal data for a maximum of two weeks, after which it is automatically deleted from our systems. Merchant account information is retained for as long as you maintain an account with us.

5. Data Sharing

5.1 Service Providers

We share information with:

• Twilio (for SMS delivery)
• Shopify (platform integration)
• Gadget.dev (infrastructure provider)

5.2 Legal Requirements

We may disclose information if required by law, regulation, legal process, or governmental request.

6. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, where data protection laws may differ. We implement appropriate safeguards to protect your information during these transfers.

7. Your Rights Under GDPR and CCPA

7.1 EU/UK Residents (GDPR)

You have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase your data
• Restrict processing
• Data portability
• Object to processing
• Not be subject to automated decisions

7.2 California Residents (CCPA)

You have the right to:

• Know what personal information is collected
• Know if personal information is sold or disclosed
• Opt-out of the sale of personal information
• Request deletion of personal information
• Non-discrimination for exercising your rights

To exercise these rights, contact us at privacy@bombocart.com.

8. SMS Messaging and Consent

We only send SMS messages to customers who have provided consent to receive marketing communications. Every message includes instructions to opt out by replying "STOP". We honor all opt-out requests immediately and maintain records of consent status.

9. Security Measures

We implement technical and organizational measures to protect your information, including encryption, access controls, and regular security assessments.

10. Changes to This Policy

We may update this Privacy Policy periodically. The updated version will be indicated by an updated "Last Updated" date. We will notify you of any material changes.

11. Contact Information

If you have questions about this Privacy Policy, please contact us at:

• Email: support@bombocart.net