Privacy Policy

Account & billing information (Customers). Name, email address, a hashed password, store domain, plan, and billing details. Payment card details are collected and stored by our payment processor — we never see or store full card numbers.

Storefront & behavioral data (Shoppers). When a merchant installs Recatchify, we receive signals about visits to that store: a first-party session identifier, pages viewed, scroll and click activity, cart contents and values, device and browser characteristics, referring source, and similar engagement signals used to detect when a shopper is hesitating.

Email & customer attributes (only when the merchant enables it). Where a merchant turns on email capture or connects their e-commerce platform, we may process a Shopper's email address and limited customer attributes the platform provides (such as prior order count, lifetime spend, or account tags), plus order identifiers and values used to measure which responses influenced a purchase.

Cookies & local storage. We use a first-party identifier stored in the Shopper's browser to recognize a session and returning visitors. We do not use it for cross-site advertising.

We instruct merchants not to send us payment card numbers, government identifiers, health data, or other special categories of data through the Service.

• Provide, operate, and secure the Service.
• Detect shopper hesitation in real time and show the appropriate on-site response.
• Generate popup copy and imagery using AI (see Section 3).
• Measure performance and attribute influenced orders and revenue.
• Handle billing, provide support, and communicate about the Service.
• Improve our product and develop new features.
• Comply with legal obligations and enforce our terms.

We use third-party artificial-intelligence providers to generate popup copy and images on request. Limited context needed to produce a result is sent to these providers under contractual confidentiality terms. We do not use Shopper personal information to train third-party AI models, and generated text and images are returned to the merchant to review before use.

We do not sell personal information. We share information only as needed to run the Service:

• Service providers / sub-processors that host our infrastructure, process payments, deliver transactional email, and provide AI generation — each bound to protect the data and use it only to provide their service to us.
• E-commerce platforms and marketing tools the merchant connects (for example Shopify, and email tools such as Klaviyo or Mailchimp) — at the merchant's direction, to enable attribution and the merchant's own follow-up.
• Legal & safety — when required by law, to protect rights and safety, or to investigate misuse.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Policy.

A current list of sub-processors is available on request at [email protected].

We keep Customer account information while an account is active and as needed to meet legal, accounting, or reporting obligations. Storefront event data is retained for a limited rolling window sufficient to power analytics and attribution, then aggregated or deleted. We will delete or return data on request, subject to legal retention requirements.

We protect information with encryption in transit, hashing of credentials and API keys, encryption at rest for sensitive stored secrets, and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Depending on where you live, you may have rights to access, correct, delete, or port your personal information, or to object to or restrict certain processing (for example under the EU/UK GDPR or the California CCPA/CPRA).

If you are a Shopper, the merchant whose store you visited controls your data — please direct requests to that merchant, and we will assist them in responding. If you are a Customer, contact us directly using the details below.

We are based in the United States and process information there. Where data is transferred from other regions, we rely on appropriate safeguards as required by applicable law.

The Service is intended for businesses and is not directed to children. We do not knowingly collect personal information from children under 16.

Merchants are responsible for having a lawful basis to collect shopper data, for posting their own privacy notice, and for obtaining any consent required in their jurisdiction (including for cookies, email marketing, and behavioral tracking) before deploying Recatchify on their store.

We may update this Policy from time to time. We will revise the “Last updated” date above and, for material changes, provide additional notice where appropriate.

Questions about this Policy or your data? Contact us at [email protected].