CartLens is an analytics app for OpoShop merchants. It shows a store owner where and why shoppers abandon their carts. This policy explains exactly what data CartLens accesses, why, and how it is protected.
1. Merchant store data (via OAuth)
When you install CartLens from OpoShop, you authorize it with read-only access to your store: orders, customers, products, and your store analytics. CartLens uses this to compute your funnel, list your abandoned carts, look up product names and prices, tell a shopper who ordered from one who left a cart, and (only if you turn it on) show a known customer's name on a cart they left. CartLens never writes to your store and never places, edits, or cancels orders.
2. Shopper data
CartLens is designed to minimize personal data about your shoppers:
- Anonymous by default. Abandoned carts and journeys are keyed by an anonymous visitor id, not a name.
- Known customers, only for you. If a shopper is a logged-in customer of your store and you turn on "Show customer names on carts" (off by default), CartLens reads their name and email from your own store so you can contact them. This is shown only to you, the merchant, and can be turned off in Settings.
- Telling a buyer from a lost cart. Whether or not that setting is on, when a logged-in customer reached checkout CartLens reads that customer's email from your own store and compares it with the email on your orders, only to tell whether they ordered. The result is a yes or no. The email is not shown and not saved for this.
- No card data, ever. CartLens never receives, stores, or has access to payment card details.
- What a cart record contains: the products in the cart, an approximate value, the step the shopper left at, device type and country, and time spent. No keystrokes, no screen recordings, no page content.
3. The storefront script
CartLens adds a small script to your storefront. It is on by default and you can turn it off at any time in Settings ("On-site tracking"). It loads after the page has finished loading. It records:
- which step of the store the shopper is on (home, product, collection, cart, checkout);
- how long the page was open and visible;
- repeated fast clicks (three or more clicks on the same thing within a second), as a count only;
- the products in the cart, when your store makes them available to the page;
- the kind of device (phone, tablet or computer) and the name of the site the shopper came from (for example "Google"), never the full address;
- an anonymous visitor id that CartLens keeps in the shopper's browser, and your store's own anonymous visitor id, read from the store's cookie;
- at checkout, the order reference from the page address, so a purchase can be told apart from a cart that was left.
It records no names, no emails, no typing, no page content and no card details. These events are stored in CartLens's own per-store database and automatically deleted after 90 days.
3a. Weekly email to the store owner
CartLens sends the store owner one recap email a week (the number of carts left without an order, about what they were worth, and the biggest drop-off). It is sent to the owner email on your store. Nothing is sent in a week with no lost carts, and you can turn it off in Settings. CartLens never emails your shoppers.
4. Where data is stored
CartLens data lives in a dedicated per-store database (MongoDB Atlas). Each store's data is isolated and scoped to that store. No store can see another's data. Access tokens are stored securely and used only to read your store's analytics on your behalf.
5. We never sell your data
CartLens does not sell, rent, or share your store or shopper data with third parties for their own use.
6. Analytics about the app itself
CartLens uses privacy-respecting product analytics (PostHog) to understand how the app is used and improve it. These events are tagged with a non-identifying store id, never a shopper's personal information.
7. Retention & deletion
Captured storefront events are deleted after 90 days automatically. If you uninstall CartLens, your data is paused and can be removed on request. To request deletion, email us.
8. Contact
Questions about privacy? Email brandon@tryfound.io.