CartSwipe

Privacy policy

Last updated

This policy explains what CartSwipe collects when you use it, why, who else handles it, how long it's kept, how to get a copy of your data or have it erased, and the privacy rights some US state laws give you.

Who runs CartSwipe

CartSwipe is a managed checkout service operated by Unified Supply LLC, from the United States. In this policy, "CartSwipe" means Unified Supply LLC and the CartSwipe service, and "the owner" means the person who runs CartSwipe for Unified Supply LLC.

CartSwipe buys products for you from a retailer, using your own account with that retailer. CartSwipe checks out on Target only today. So in this policy, "the retailer" means Target for now, and "your retailer accounts" are the accounts you add under Target Accounts in the portal.

You can reach CartSwipe in the CartSwipe Discord, by direct message to the owner for anything private or in the #support channel for general questions, or by email at support@cartswipe.app, which goes to the owner. There's no phone line or contact form.

What CartSwipe collects

CartSwipe aims to collect only what it needs to sign you in, run checkouts for you, bill you for them, pay the partners who refer customers and keep the service secure. Some details reach it that it doesn't need: Discord sends your avatar and may share the email address on your Discord account (see the first item below), and CartSwipe's sign-in provider keeps the Discord details of people CartSwipe turns away (see "Turned-away sign-ups").

  • Your Discord account. When you sign in with Discord, CartSwipe receives your Discord user ID, username, display name and avatar, checks that you're a member of the CartSwipe Discord server, and records when you passed that check. Discord may also share your Discord account's email address with CartSwipe's sign-in provider. CartSwipe doesn't use it to contact you.
  • Your agreement. When you agreed to the Terms of service and this Privacy policy, which version you agreed to, and that you confirmed you're 18 or older. CartSwipe doesn't record your age or date of birth.
  • Your referral. If a referral partner referred you, which partner, how (their link, their code, or the owner's record) and when, and any change the owner made, with the owner's reason. Within 30 days of your first agreement, the owner can record, change or remove it, for example if you tell the owner a partner referred you, or the CartSwipe Discord shows you joined through a partner's invite link. The owner can also stop it counting at any time, for example if it was the partner's own account or the referral was misused; the partner's role comes off then too. A referral doesn't change your fees.
  • If you're a referral partner. Your name, your Discord user ID, your commission rate, the owner's notes about you, a history of the changes to your partner record with the owner's reasons, and the monthly totals CartSwipe works out and pays you.
  • Your retailer accounts. For each retailer account you add in the portal: the name you give it, whether it's switched on, and the products you've selected for it.
  • Your retailer login. The email or username and password used to sign in to the retailer as you.
  • Email access. The mail server, username and password for the mailbox your retailer account uses, so the verification code the retailer emails you during checkout can be read.
  • Your checkout profile. Your name, email address, phone number, and shipping and billing names and addresses.
  • Your payment card. The card number, expiry date and security code used to pay the retailer at checkout. CartSwipe also gives each saved card two random reference numbers (see "How your setup details are protected").
  • Your billing email. The address you give for CartSwipe's invoices. It's separate from the email on your checkout profile.
  • Your invoices. The products and quantities bought for you, the service fees, payment status, any adjustments or refunds, and when you accepted the billing terms.
  • Checkout results. When a checkout succeeds, CartSwipe's checkout software posts a notice to CartSwipe's own channel in the CartSwipe Discord. The notice includes the retailer's order number (today, Target's). CartSwipe's database records the product, the quantity, which of your retailer accounts was used, and a one-way code made from the order number, not the order number itself. The notice stays in that channel until the owner deletes it.
  • Notes about your account. Notes the owner records, for example about a block, extra retailer account slots, a suspension, a refund or a cancellation.
  • Security and abuse-prevention records. Logs of when your setup details were added, changed, viewed, downloaded or deleted (never the details themselves), records of blocked accounts, and short-lived counters of recent sign-in, payment-page and referral-code attempts.
  • Privacy request records. When the owner makes a copy of your data for you, or erases it, CartSwipe records when that happened, with counts and references only.
  • Emails you send. If you email support@cartswipe.app, the owner receives your email address, your message and anything you attach.
  • Messages you send the owner. What you write to the owner in the CartSwipe Discord, by direct message, in #support or in your private channel, and anything you attach, such as a screenshot of a canceled order.
  • Turned-away sign-ups. If you sign in with Discord but CartSwipe turns you away, for example because new sign-ups are paused or you're not a member of the CartSwipe Discord server, CartSwipe's sign-in provider still keeps the Discord account details Discord sent: your Discord user ID, username, display name and avatar, and your email address if Discord shared it.
  • Technical data. Like any website, CartSwipe's hosting providers receive your IP address and browser details with each request, and the sign-in provider records them with sign-in events.

CartSwipe never receives the card you use to pay CartSwipe's own invoices. You enter it on Stripe's payment page, and Stripe handles it.

How CartSwipe uses it

  • To sign you in and confirm you're a member of the CartSwipe Discord.
  • To keep a record that you agreed to the Terms of service and this Privacy policy, and confirmed you're 18 or older.
  • To set up and run checkouts for the products you select, on the retailer accounts you choose.
  • To bill you for successful purchases, record payments, and handle cancellations and refunds.
  • To pay referral partners. If a partner referred you, CartSwipe pays that partner a share of the service fees you pay while the partner works with CartSwipe, less refunds and disputes, and gives your Discord account the partner's role in the CartSwipe Discord.
  • To send billing messages. Stripe emails your invoices to your billing email, and billing questions are answered in the CartSwipe Discord. CartSwipe Helper also posts a note in your private channel there when an invoice is ready, with its amount, its payment deadline and a link to pay it on Stripe's invoice page, and another when it's paid. Once CartSwipe switches on billing follow-up, other payment notices are posted there too.
  • To answer your questions and requests, including privacy requests.
  • To give you a private channel with the owner in the CartSwipe Discord, to tell the owner there when one of your retailer accounts is ready to be set up, and to tell you there when CartSwipe's checkout software reports a successful checkout for you.
  • To keep CartSwipe secure and stop abuse.

CartSwipe doesn't sell your personal information, doesn't share it for advertising, and doesn't use advertising or analytics cookies.

How your setup details are protected

Your retailer login, email access, checkout profile and payment card are your setup details. CartSwipe encrypts your retailer login, email access and checkout profile on its server, using a key kept outside the database, before storing them in its database. Your payment card is sent from CartSwipe's server, over an encrypted connection, to Amazon Web Services (AWS), whose key service encrypts it. Only the encrypted card is stored, at AWS. CartSwipe's database keeps only two random reference numbers for it: one says which encrypted card is yours, and AWS won't unlock the card without the other. When CartSwipe deletes your card, its encrypted copy at AWS is deleted too: normally within an hour, or, if CartSwipe's hourly cleanup isn't running or can't reach AWS, by AWS on its own within a few days after the 7 days from when you saved it are up. Once saved, your retailer login, email access and card are never shown back to you. Your checkout profile is shown back to you in the portal, so you can review, change or remove it. Otherwise, only the owner can view your setup details, after two-factor verification, while setting up your account. Your card is never shown on screen.

To run your checkouts, the owner downloads your setup details as files and imports them into CartSwipe's checkout software on a computer the owner controls. Only the owner can download these files. The owner confirms each import session with the owner's own two-factor code, which opens a window of at most one hour, and every download is logged with its reason. Your card is unlocked at AWS only for such a download: that's the only time CartSwipe's database gives out the second reference number. CartSwipe's server doesn't keep a copy of the files. The files themselves aren't encrypted, so the owner deletes them as soon as the import is done.

Once your setup details are in the checkout software, a copy stays there, on the owner's computer, for as long as your retailer account is set up for checkout, because the checkout software needs them to sign in, read your verification code and pay.

Mailbox access lets the checkout software read that mailbox, not just the verification code. If you can, use a mailbox that's only for your retailer account.

Who else handles your data

CartSwipe uses these service providers. Supabase and Vercel run CartSwipe's database and servers, so between them they handle everything in CartSwipe's database and website (your setup details are encrypted before they're stored). Your payment card is stored with Amazon Web Services instead of CartSwipe's database. The others receive what's described below:

  • Supabase hosts CartSwipe's database and sign-in.
  • Vercel hosts the CartSwipe website and runs its server code.
  • Amazon Web Services (AWS) encrypts your payment card, stores the encrypted card until it's deleted, and keeps the key that encrypts it. CartSwipe keeps an audit log at AWS of each use of that key and of the card store, which shows CartSwipe's internal reference numbers but never your card details.
  • Stripe sends CartSwipe's invoices and processes your payments for them. It receives your billing email and the invoice details: the products, quantities and fees, and CartSwipe's own reference numbers.
  • Discord provides sign-in, the CartSwipe community server, and the channel where checkout results are posted. After you agree to the Terms of service and this Privacy policy, CartSwipe opens a private channel there for you and the owner, named after your Discord username, usually within a few minutes, and posts a welcome message in it. When one of your retailer accounts has all its setup details, CartSwipe tells the owner in that channel, with the account's CartSwipe reference and the date its setup details will be deleted. CartSwipe Helper, CartSwipe's Discord bot, also posts notes for you in that channel: when CartSwipe's checkout software reports a successful checkout on one of your retailer accounts (the product, the quantity and the time, never the order number or the name you gave the account), when one of your invoices is ready (its amount, its payment deadline and a link to pay it on Stripe's invoice page) and when it's paid. Anyone who has that link can open the invoice and pay it, so don't share it. Once billing follow-up is switched on, CartSwipe Helper also posts your other payment notices there. It opens a private channel only for the Discord account you sign in to CartSwipe with. If a referral partner referred you, CartSwipe Helper also gives your Discord account that partner's role there, and takes it off if the owner removes the referral or stops it counting, or your personal data is erased.
  • Cloudflare Turnstile checks that sign-in visits come from a person. Cloudflare receives your IP address and details about your browser for that check.

The retailer (today, Target) receives your login, checkout profile and card when the checkout software signs in and checks out for you, the same as when you buy from the retailer yourself. The retailer's own privacy policy covers what it does with them.

Referral partners are people CartSwipe pays to tell others about it. They aren't service providers and don't handle your data for CartSwipe. Everyone in the CartSwipe Discord, the partner included, can see a partner's role on your Discord profile in the server, and in the member list if the role is shown there. Each month, CartSwipe tells a partner only totals for everyone they referred: how many of them paid, the service fees they paid after refunds and disputes, and what CartSwipe owes the partner. It never lists what you bought or what you paid. But if only one or a few people have a partner's role, the partner may be able to work out what you paid (exactly, if you're the only one), and whether you got a refund or disputed a payment.

CartSwipe's checkout software runs on a computer the owner controls. It posts checkout notices only to CartSwipe's own Discord channel, and nothing about you is sent to the software's developer.

Emails you send to support@cartswipe.app pass through an email forwarding service to the owner's own mailbox, and the owner's email provider stores them.

Messages you post in the CartSwipe Discord's channels, #support included, can be read by other members who can see those channels and by anyone the owner gives administrator rights in the server. Direct messages are between you and the owner. A private channel can be read by you, the owner, CartSwipe Helper and anyone with administrator rights in the server.

CartSwipe may also share information when the law requires it, or to protect CartSwipe, its customers or others from fraud or abuse.

If CartSwipe's business is sold, merged with another business or reorganized, your information may be transferred to the new owner as part of that.

Your information is stored and processed mainly in the United States. Stripe, Discord, Cloudflare and the email services behind support@cartswipe.app may also handle it in other countries, as their own privacy policies explain.

How long CartSwipe keeps it

CartSwipe deletes what it holds on the schedule below, for every customer. Automatic cleanups do most of the deleting: daily for most records, and hourly for a retailer login, email access or card still waiting for the owner to confirm your setup. The owner deletes a few items by hand, as the list says. So a record can last a few days past its date, and longer while something linked to it is still kept or is still being checked with Stripe.

  • Retailer login, email access and payment card: deleted from CartSwipe's database when the owner confirms your setup, when you remove them, or when you delete the retailer account. If the owner hasn't confirmed your setup within 7 days of when you saved one of them, it's deleted automatically, without a warning first, and you'll need to enter it again. The page for that retailer account shows the date for each one. The encrypted copy of your card at AWS is normally deleted within an hour after it's deleted from CartSwipe's database. If CartSwipe's hourly cleanup isn't running, or can't reach AWS, AWS deletes the encrypted card on its own, within a few days after the 7 days from when you saved it are up.
  • Checkout profile: kept while the retailer account exists, because it's needed if the account has to be set up again. Deleted when you delete the retailer account.
  • In the checkout software: your setup details stay on the owner's computer while the retailer account is set up for checkout. The owner removes them by hand when you ask, or when your personal data is erased.
  • Checkout results: deleted 12 months after the latest notice about that order. If you were billed for the order, its product and quantity stay with your invoice, as below. The checkout software's notices in CartSwipe's Discord channel stay until the owner deletes them by hand.
  • Invoices and payment records: deleted 18 months after the invoice is final. Final means paid, refunded, waived or canceled, with nothing still in progress or unresolved on it, such as a payment, a refund, a dispute or a problem the owner is looking into. Some warnings CartSwipe puts on an invoice, such as a mismatch with Stripe, never clear by themselves: an invoice with one is final only once the owner has checked it in Stripe and recorded that nothing is owed. A bill that was prepared but never sent to you is final once the owner cancels it or records that nothing is owed on it. If it's held back because of a warning and CartSwipe had already created it at Stripe as an unsent draft, it's final only once that draft is deleted at Stripe and the owner has recorded that. The orders, fees, refunds, cancellations, billing suspensions and billing messages that belong to an invoice are deleted with it. A refund or dispute that comes later starts the 18 months again. This is the same for everyone, including after an erasure. Stripe keeps its own copy of each invoice it sent you, under its own rules.
  • Orders that never made it onto an invoice: deleted 18 months after the owner canceled them. An order still waiting to be invoiced is kept until it's invoiced or canceled.
  • A one-way code for each order CartSwipe recorded for billing, with the store and the date: kept permanently, so the same order can never be billed twice. It holds nothing else.
  • Notes the owner records about your account: kept with the record they're about, and deleted with it. They can't be edited.
  • Blocks and extra retailer account slots: each change, with the owner's note, is deleted 18 months after it was made. While you have a CartSwipe account, a block stays until the owner lifts it, the latest block change stays while you're blocked, and the latest slot change stays while you have extra slots.
  • The record that you accepted the billing terms: kept while you have a CartSwipe account. After your personal data is erased, it's deleted with your closed account: 18 months after the erasure, or later if another record of yours is still kept then.
  • The record that you agreed to the Terms of service and this Privacy policy and confirmed you're 18 or older, one for each version you agreed to: kept while you have a CartSwipe account. After your personal data is erased, it's deleted with your closed account: 18 months after the erasure, or later if another record of yours is still kept then.
  • The record of your referral, and of any change the owner made to it: kept while you have a CartSwipe account. After your personal data is erased, it's deleted with your closed account: 18 months after the erasure, or later if another record of yours is still kept then.
  • A referral partner's role in the CartSwipe Discord: kept while your referral stands, including after the partner stops working with CartSwipe, unless the owner takes it off. CartSwipe Helper takes it off when the owner removes the referral or stops it counting, or your personal data is erased.
  • A referral partner's own record (their name, Discord user ID, rate, the owner's notes about them, and the history of changes to their record with the owner's reasons) and the totals and payments worked out for them: kept as long as any customer they referred has a CartSwipe account, or until 4 years after the year of the last payment (for tax) if that's later; after that, deleted when the owner asks.
  • Your Discord details, billing email and list of retailer accounts: kept while you have a CartSwipe account, until your personal data is erased, at your request or by the owner's decision.
  • Logs of when your setup details were added, changed, viewed, downloaded or deleted: deleted 18 months after each entry. They never contain the details themselves.
  • Records of privacy requests (a copy of your data, or an erasure): deleted 18 months after the request. The record of an erasure stays until the records it kept are deleted, if that's later. They hold counts and references only.
  • The record of a turned-away sign-up: kept until you ask the owner, in the CartSwipe Discord or by email to support@cartswipe.app, to remove it, or the owner deletes it. If you sign in again later and are let in, it becomes your CartSwipe account.
  • The sign-in provider's log of your sign-ins and sign-outs, with your email and IP address: kept while you have a CartSwipe account. Erasure removes your email and IP address from it, including from any entry added later. What's left shows only what happened and when, under an internal reference, and is deleted 18 months after the erasure.
  • Counters of recent sign-in, payment-page and referral-code attempts: each one stops counting after ten minutes, and expired counters are deleted automatically as later attempts come in.
  • Emails you send to support@cartswipe.app: kept in the owner's mailbox until the owner deletes them, and deleted when your personal data is erased.
  • Messages you send the owner in the CartSwipe Discord: they stay in Discord until they're deleted, and you can delete your own messages at any time. CartSwipe Helper's messages in your private channel stay there until the channel is deleted. When your personal data is erased, the owner deletes any private channels you have. Your posts in #support and the direct messages you sent stay until you delete them.
  • Records of the notes CartSwipe Helper posts or tries to post in your private channel (which checkout or invoice each one is about, when, whether it went out, whether its payment link was Stripe's or Billing's, and why one waited or wasn't sent; never the note itself or its link): deleted about 30 days after each note was queued, or later while the invoice it's about is still open, and when your personal data is erased. They aren't in your data copy: besides references to records that are in it, they hold only those details.
  • Backups and hosting logs: CartSwipe's database provider keeps backups for up to 8 days, and the hosting providers keep their own request logs for a limited time. Deleted data disappears from them as they expire. Your payment card is never in those backups, and CartSwipe keeps no backups of the encrypted cards at AWS. CartSwipe's audit log at AWS, which never contains card details, is kept for about 13 months.

Sign-in and abuse protection

To protect sign-in, payments and referral codes from abuse, CartSwipe limits how often one network or one account can repeat sign-in, payment-page and referral-code actions. For the network limit, CartSwipe keeps a non-reversible fingerprint of your IP address in a counter that expires after ten minutes. It never stores the address itself. Payment-page limits are counted per account and per invoice, under a one-way code made from them. Referral-code tries are counted per account, under a one-way code made from it.

The sign-in page also uses Cloudflare Turnstile to check that a person, not a bot, is signing in.

Security

Setup details are encrypted before they're stored. Only CartSwipe administrators can reach them (today that's only the owner), and only after two-factor verification. You can also see your own checkout profile in the portal.

No system is perfectly secure. If something happens that affects your information, CartSwipe will tell affected customers as the law requires.

The owner will never ask for your password, card number or security code in Discord or by email. Enter them only on CartSwipe's setup pages, after signing in.

Your choices and requests

  • See and change your details. Your retailer accounts, product selections, checkout profile and billing email are in the portal. Your retailer login, email access and card are never shown back, but you can replace or remove them at any time.
  • Delete a retailer account in the portal. Its setup details and product selections are deleted from CartSwipe's database straight away, and the encrypted copy of its card at AWS follows, as "How long CartSwipe keeps it" explains. Deleting it doesn't reach the checkout software on its own, so also ask the owner, in the CartSwipe Discord or by email to support@cartswipe.app, to remove it from the checkout software.
  • Get a copy of your data. Send the owner a direct message in the CartSwipe Discord, or email support@cartswipe.app. The owner prepares a file with the personal information CartSwipe holds about you, including the owner's notes about your account, and sends it to you by Discord direct message. The owner deletes that message after you've saved the file, or after 30 days. The file never contains your passwords or card details, your retailer login or your email access details: for those, it lists only what you saved and when. It also leaves out the two reference numbers that point to your card.
  • Erase your personal data. Send the owner a direct message in the CartSwipe Discord, or email support@cartswipe.app. Erasure waits until anything you owe, or anything owed to you, is settled, and it can't be undone. The owner then deletes your email addresses, names, addresses and phone number, your retailer accounts and setup details, including any card still waiting for setup (its encrypted copy at AWS follows, as "How long CartSwipe keeps it" explains), your billing email, your Discord name and ID, the link between each of your Discord accounts and CartSwipe, and your sign-in sessions. Your email and IP address are also removed from the sign-in provider's log. The owner also removes your accounts from the checkout software and deletes your customer record at Stripe. In the CartSwipe Discord, the owner deletes any private channels you have, the checkout software's notices for the retailer accounts CartSwipe still has a record of, and any copy of your data sent to you by direct message, and deletes the emails you sent to support@cartswipe.app. CartSwipe Helper also takes off any referral partner's role it gave you there (or the owner does, if CartSwipe Helper can't), and CartSwipe keeps your Discord ID only until that's done. You stay a member of the CartSwipe Discord server unless you ask to be removed.
  • What erasure keeps. Your invoices, payments and refunds, the history of blocks and retailer account slots on your account, the logs of how your setup details were handled, the billing terms you accepted, your agreements to the Terms of service and this Privacy policy, the referral recorded for you, and the record of the erasure are kept under an internal reference, without your contact details or Discord ID; the owner's notes are kept as written. They're deleted on the same schedule as everyone's: 18 months after each is final. That's normally no later than 18 months after the erasure. It can be later if something about an invoice changes, such as a refund or a dispute, or while something about it is still being checked. The billing terms you accepted, your agreements to the Terms of service and this Privacy policy, the referral recorded for you, and the record of the erasure go last, with your closed account. Notes the owner recorded about your account can't be edited, so they may include your name. CartSwipe also keeps a one-way code made from each Discord account you used, only so that billing follow-up doesn't record that account again. It's removed if you sign in to CartSwipe with that account again, or 18 months after the erasure or after CartSwipe last saw the account in the CartSwipe Discord, whichever is later. Your old CartSwipe account stays closed, but you can sign up again later as a new customer, unless the owner had ended your access for breaking the Terms of service.

Send requests by direct message from the Discord account you sign in to CartSwipe with, or by email to support@cartswipe.app. "How to use your privacy rights" below explains how the owner checks that a request is yours, and how soon you'll get an answer.

Some copies are outside CartSwipe's control. Stripe keeps the invoices it issued, with the email address they were sent to, and its payment records, as the law requires, even after CartSwipe deletes its own copies. The retailer keeps your retailer account and orders, and Discord keeps messages you've posted (you can delete your own). Deleted data can stay in backups and in the hosting providers' logs until they expire.

CartSwipe's audit log at AWS keeps its reference numbers for you, your retailer accounts and your cards until it expires, about 13 months later; an erasure doesn't remove them.

Depending on where you live, you may have other privacy rights. The next sections describe them and how to use them.

Categories of personal information

Some US state privacy laws, such as California's, sort personal information into set categories. CartSwipe collects personal information in these categories, all described above, and in the last 12 months it hasn't collected any in other categories:

  • A. Identifiers: your name, email addresses, phone number, shipping and billing addresses, Discord user ID and username, IP address, and the reference numbers CartSwipe assigns to you, your retailer accounts and your payment card.
  • B. Customer records, as California law defines them: your name, addresses, phone number and payment card number.
  • C. Characteristics of protected classifications: only your confirmation that you're 18 or older. CartSwipe doesn't record your age or date of birth.
  • D. Commercial information: the products you select, the purchases made for you, your invoices, service fees, payments, refunds and cancellations, and which referral partner referred you.
  • F. Internet or network activity: your IP address and browser details, your sign-ins and sign-outs, and counters of recent sign-in, payment-page and referral-code attempts.
  • H. Audio, electronic, visual or similar information: only screenshots you choose to send the owner, such as proof that an order was canceled.
  • L. Sensitive personal information: your retailer login, your email access (which lets the checkout software read the emails in that mailbox), and your payment card number with its expiry date and security code.

CartSwipe hasn't collected the other categories those laws list: biometric information (E), device location (G), professional or employment information (I), education information (J), and inferences drawn to build a profile about you (K).

CartSwipe gets personal information from these sources:

  • You, when you sign up (including a referral code you enter or a partner's link you open), set up your retailer accounts, use the portal, and message or email the owner.
  • Discord, when you sign in with it: your Discord account details and whether you're a member of the CartSwipe Discord server, and, if the owner checks a referral, which invite link you joined the server with.
  • Your browser, automatically, when you visit: your IP address and browser details.
  • The retailer (today, Target), through CartSwipe's checkout software: whether a checkout worked, and the order number. The checkout software also reads the verification codes the retailer emails to your mailbox.
  • Stripe: whether your invoices are paid, refunded or disputed.
  • The owner, who records notes about your account.

CartSwipe doesn't buy personal information or get it from data brokers.

Disclosures, sales and sharing

CartSwipe discloses personal information in categories A, B, C, D, F, H and L for business purposes: to run checkouts for you, bill you, pay referral partners, answer your requests and keep CartSwipe secure. It discloses it to the recipients below, and in the last 12 months it hasn't disclosed personal information in any other category:

  • Supabase, which hosts CartSwipe's database and sign-in: every category above except H, but never your payment card number, expiry date or security code. Screenshots stay in Discord, or in the owner's mailbox if you email them.
  • Vercel, which hosts CartSwipe's website and runs its server code: every category above except H. That includes your payment card, which passes through CartSwipe's server code on its way to AWS, and back when the owner downloads it for the checkout software.
  • Amazon Web Services, which encrypts and stores your payment card: identifiers (CartSwipe's reference numbers for you, your retailer account and your card) and your payment card number, expiry date and security code, which are customer records and sensitive personal information.
  • Stripe, for invoices and payments: identifiers and commercial information.
  • Discord, for checkout notices in CartSwipe's own channel, the copy of your data the owner sends you by direct message, your messages with the owner, the welcome, setup, checkout, invoice and payment notes in your private channel, a referral partner's role on your Discord account and, once billing follow-up is switched on, other billing messages in your private channel: identifiers, customer records (the checkout profile in your data copy), your 18-or-older confirmation (in your data copy), commercial information, internet activity (the sign-in times in your data copy) and visual information (screenshots you send the owner).
  • Referral partners, and the other members of the CartSwipe Discord, if a partner referred you: identifiers (your Discord account, through the partner's role) and commercial information (that the partner referred you). The partner also gets monthly totals for everyone they referred, as "Who else handles your data" explains.
  • Cloudflare, for the sign-in check: identifiers and internet activity (your IP address and browser details).
  • The retailer (today, Target), when the checkout software signs in and places orders for you, as you asked: identifiers and customer records (your checkout profile), sensitive personal information (your retailer login and card), and commercial information (the order).
  • The email services that forward and store emails you send to support@cartswipe.app: identifiers (your email address), and anything else you include, such as screenshots.

CartSwipe doesn't sell personal information, and doesn't share it for cross-context behavioral advertising (ads based on what you do on other websites and apps). It hasn't done either in the last 12 months, including for anyone under 16.

CartSwipe uses sensitive personal information only to provide the service you asked for: to set up and run your checkouts, which means signing in to your retailer account, reading the verification code the retailer emails you, and paying with your card. It never uses it to infer anything about you. Some state laws, including California's, give you a right to limit how a business uses sensitive personal information. CartSwipe uses it only to provide the service you asked for, so it doesn't offer a separate way to limit that use. If you want CartSwipe to stop using it, remove your setup details, ask the owner to remove them from the checkout software, or ask for erasure.

Your privacy rights by state

Depending on where you live, US state privacy laws may give you these rights. They have limits: CartSwipe may turn down a request where the law allows it, for example if the request can't be verified, or if CartSwipe keeps a record it needs, as "What erasure keeps" explains.

  • To know whether CartSwipe processes your personal information, and to access it: what CartSwipe holds about you, where it came from, why it's used and who receives it.
  • To correct personal information that's wrong. You can change most of your details yourself in the portal. For anything else, ask the owner. Some records, such as invoices and the owner's notes, can't be edited once made; if one of those is wrong, the owner will tell you what can be done.
  • To delete your personal information. CartSwipe does this by erasing your personal data, as described above.
  • To get a copy of your personal information in a form you can reuse. The copy the owner prepares for you is a machine-readable file.
  • Not to be treated differently for using these rights. CartSwipe won't charge you more or refuse you service because you used them. An erasure does close your account, though, because CartSwipe can't run checkouts for you without your details.
  • To opt out of targeted advertising, the sale of your personal information, and profiling used to make decisions that have legal or similarly serious effects on you, such as decisions about loans, housing or jobs. CartSwipe doesn't do targeted advertising or sell personal information, and it doesn't profile you.
  • To withdraw your consent for CartSwipe to use your sensitive personal information. At any time, you can remove setup details that are still waiting for setup in the portal, ask the owner to remove your details from the checkout software (once your setup is confirmed, and the encrypted copy of your card at AWS has been deleted, that's the only place your retailer login, email access and card are kept), or ask for erasure. CartSwipe can't run checkouts for you without them.

Depending on your state, you may also have the right to get a list of the categories of third parties CartSwipe has disclosed your personal information to, or a list of the specific third parties. This policy lists the recipients above, and you can ask for a list of the specific third parties that applies to you.

How to use your privacy rights

To make a request, email support@cartswipe.app or send the owner a direct message in the CartSwipe Discord. Say which right you want to use.

The owner checks that each request is yours before acting on it. Send it from the Discord account you sign in to CartSwipe with, so the owner can match it to your CartSwipe account. If a request comes another way, such as by email, or the owner can't match it, the owner may ask you to confirm it from that Discord account, or ask for more information to verify it. That information is used only to verify the request.

You can also have someone else, an authorized agent, make a request for you where your state's law allows it. The owner may ask the agent for your signed permission, and may ask you to confirm the request yourself. A request from an agent who can't show they're authorized may be turned down.

CartSwipe answers privacy requests within 30 days.

If CartSwipe turns down your request, in whole or in part, you can appeal. Reply to the decision, or email support@cartswipe.app with "Appeal" in the subject line. The owner will tell you what was decided on the appeal, and why. If the appeal is turned down, you can contact your state's attorney general.

Cookies and privacy signals

CartSwipe uses only the cookies needed to keep you signed in, and one referral cookie. If you open a referral partner's link, CartSwipe stores that partner's referral code in a cookie in your browser, so the code is filled in for you when you sign up. The cookie holds only the code. It expires after 60 days. If you agree to the Terms of service and this Privacy policy in that browser, CartSwipe deletes it then. CartSwipe doesn't use advertising or analytics cookies. On the sign-in page, Cloudflare Turnstile may read information from your browser to tell people from bots.

Some browsers can send a Global Privacy Control or Do Not Track signal, asking websites not to sell or share your information or track you. CartSwipe doesn't sell personal information, doesn't share it for advertising and doesn't track you across websites, so there's nothing for these signals to opt out of.

Age limit

CartSwipe is only for people aged 18 or older. CartSwipe asks you, before you use the portal, to confirm you're 18 or older. CartSwipe doesn't knowingly collect information from anyone younger.

Changes to this policy

If this policy changes, the new version will be posted here with a new date at the top. Important changes will also be announced in the CartSwipe Discord. After an important change, CartSwipe will ask you to agree to the new version before you use the portal again.

Contact

Questions and privacy requests go to the owner, by direct message in the CartSwipe Discord or by email to support@cartswipe.app.