CartLens is an analytics app for OpoShop merchants. It shows a store owner where and why shoppers abandon their carts. This policy explains exactly what data CartLens accesses, why, and how it is protected.
1. Merchant store data (via OAuth)
When you install CartLens from OpoShop, you authorize it with read-only access to your store: orders, customers, products, and your store analytics. CartLens uses this to compute your funnel, list your abandoned carts, resolve product names/prices, and — only if you enable it — show a known customer's name on a cart they abandoned. CartLens never writes to your store and never places, edits, or cancels orders.
2. Shopper data
CartLens is designed to minimize personal data about your shoppers:
- Anonymous by default. Abandoned carts and journeys are keyed by an anonymous visitor id, not a name.
- Known customers, only for you. If a shopper is a logged-in customer of your store and you enable "Name known shoppers," CartLens resolves their name/email from your own store so you can recover the sale. This is shown only to you, the merchant, and can be turned off in Settings.
- No card data, ever. CartLens never receives, stores, or has access to payment card details.
- What a cart record contains: the products in the cart, the cart's value, the step the shopper left at, coarse device type and country, and time spent — no keystrokes, no screen recordings, no page content.
3. Optional storefront capture
CartLens can optionally place a tiny script on your storefront to add exact step timing and hesitation signals to journeys. It is off-able in Settings, adds near-zero weight to your store, and records no personal data — an anonymous visitor id, which step, which product, and timing. Captured events are stored in CartLens's own per-store database and automatically deleted after 90 days.
4. Where data is stored
CartLens data lives in a dedicated per-store database (MongoDB Atlas). Each store's data is isolated and scoped to that store — no store can see another's data. Access tokens are stored securely and used only to read your store's analytics on your behalf.
5. We never sell your data
CartLens does not sell, rent, or share your store or shopper data with third parties for their own use.
6. Analytics about the app itself
CartLens uses privacy-respecting product analytics (PostHog) to understand how the app is used and improve it. These events are tagged with a non-identifying store id — never a shopper's personal information.
7. Retention & deletion
Captured storefront events are deleted after 90 days automatically. If you uninstall CartLens, your data is paused and can be removed on request. To request deletion, email us.
8. Contact
Questions about privacy? Email brandon@tryfound.io.