Personal data covered
CartPlus is presented on this site as a unit of Amvention Private Limited in India. CartPlus processes information about merchants, team members, customers, website visitors, support contacts, and other people who interact with CartPlus or storefronts powered by CartPlus. Personal data means information that can identify a person on its own or when combined with other information available to us.
Information we collect
Depending on how you use CartPlus, we may collect account details, business and organization details, storefront content, product and catalog data, buyer contact details, order records, delivery or pickup information, payment references, subscription billing records, support messages, device data, log data, IP address, browser details, user-agent information, cookies, and security events.
- Merchant account, organization, role, billing, and subscription information.
- Storefront, catalog, product, inventory, customer, order, fulfillment, return, and support data.
- Customer names, phone numbers, email addresses, delivery addresses, order notes, and purchase history entered through a CartPlus storefront or by a merchant.
- Payment status, transaction identifiers, invoices, refunds, disputes, and payment processor references.
- Device, browser, IP address, user-agent, cookie, log, analytics, and security information used to operate and protect the service.
How information is collected
We collect information directly from you when you create an account, manage a store, place or manage an order, submit a contact form, request support, configure integrations, or communicate with us. We may also receive information from merchants using CartPlus, authorized team members, payment providers, communication providers, analytics and hosting services, and integrations you choose to connect.
India privacy and platform obligations
This policy is written for CartPlus and Indian commerce operations. Where applicable, CartPlus handles personal data in line with Indian privacy and digital commerce obligations, including the Digital Personal Data Protection Act, 2023 and applicable rules, the Information Technology Act, 2000 and related rules, consumer protection requirements, tax and accounting obligations, payment network rules, and lawful requests from Indian authorities.
How information is used
We use information to provide and maintain CartPlus, verify identity and account access, publish storefronts, process orders, enable payments, send operational notifications, manage subscriptions, respond to requests, provide support, improve product workflows, debug issues, protect accounts, prevent fraud and misuse, enforce terms, and comply with Indian legal, GST, accounting, security, consumer, payment, and regulatory obligations.
Sharing and processors
CartPlus may share information with merchants and their authorized team members, customers involved in an order, and service providers that help us operate the platform. These providers may support hosting, storage, analytics, payment processing, invoicing, email, WhatsApp or SMS communication, delivery workflows, customer support, security monitoring, and operational administration. We may also disclose information where required by Indian law, regulation, court order, enforcement request, tax authority request, payment dispute process, or to protect CartPlus, users, merchants, customers, and the public.
Consent and legitimate interests
Where consent is required, we ask for it before collecting or using information for the stated purpose. You may withdraw consent by contacting us, but some services may no longer be available if the requested processing is needed to provide them. We may also process information where permitted by law for legitimate interests such as fraud detection, misuse prevention, payment risk review, network and account security, service reliability, and business operations.
Access, correction, and deletion requests
Merchants, customers, and other users can contact CartPlus to ask for access to personal data, corrections, deletion, account-related support, or details about how information has been used or shared. We may need to verify the request and may retain some information when required for security, legal, billing, tax, dispute, fraud prevention, backup, or operational reasons.
Protection, accuracy, and retention
We use administrative, technical, and organizational safeguards such as access controls, authentication, encryption in transit where supported, least-privilege access, logging, monitoring, software updates, and limited internal disclosure. No internet service can guarantee absolute security, so users should keep account credentials safe and avoid sending passwords, card numbers, or unnecessary sensitive information through support messages.
We generally rely on users and merchants to keep account, storefront, order, and customer information accurate. CartPlus retains information for as long as needed to provide the service, meet legal or business purposes, resolve disputes, enforce agreements, prevent misuse, maintain backups, and comply with applicable Indian obligations such as GST, accounting, audit, consumer complaint, payment dispute, and regulatory recordkeeping requirements. When information is no longer needed, we delete it or remove identifying details where reasonably possible.
India and international processing
CartPlus is intended for India-focused merchants and customers, but CartPlus and its service providers may process information in India and in other countries where those providers operate. Cross-border processing is handled subject to applicable Indian law and provider safeguards. We may update this policy from time to time, and the latest version will be identified by the last updated date shown on this page. Continued use of CartPlus after an update means the updated policy applies from that date.
Privacy contact
Submit privacy questions, access requests, correction requests, deletion requests, or consent withdrawal requests through the Contact page and select Privacy request as the inquiry type.