Privacy Policy
Last updated: 4 October 2026 · CartRevival, cartrevival.com
The short version
CartRevival is a WordPress plugin that stores its shopper data in your own store's database. The only external service it talks to is our licensing and metering API at cartrevival.com, and what it sends there is the minimum needed to operate your plan — never shopper names, emails, phone numbers, cart contents or full IP addresses.
What the plugin sends to cartrevival.com
- On registration and daily plan refresh: your site's domain, plugin version and WordPress version.
- When carts enter recovery (metering): your licence key, domain, an opaque per-cart identifier, and non-identifying bot-detection signals for each cart (browser user-agent string, whether our JavaScript ran, interaction/page-view counts, session duration). These signals exist so bot traffic is never billed against your quota.
- On update checks: your licence key, domain and plugin version.
No shopper personal data is ever sent: no names, no emails, no phone numbers, no addresses, no cart contents, no payment data, no IP addresses.
Free plugin: opt-in "Stay in the loop" telemetry
The free plugin sends nothing to cartrevival.com unless the store admin explicitly opts in, in the plugin's setup guide or its one-time notice. Nothing is pre-selected, and the choice can be changed or withdrawn at any time under CartRevival → Settings → Compliance.
- "Yes, send me the weekly report": once a day, the site's domain, the email address the admin entered, the CartRevival, WordPress and PHP versions, a random site code, and four totals for the last 7 days (carts abandoned, carts recovered, value recovered, reminders sent). We use them to email a free weekly recovery report and security & update alerts for new releases. Every email has a one-click unsubscribe.
- "Share anonymously": once a day, only the version numbers and a random site code — no domain, no email, no totals.
- "No thanks": nothing is sent.
No shopper data is ever part of this: no names, emails, phone numbers, addresses, IP addresses, carts or orders. Withdrawing deletes the site code and report email on the store, so past pings can no longer be linked to it; email support@cartrevival.com to have the server-side record deleted too.
What we store server-side
- Licence records: your email address, site domain, plan tier, and monthly recovered-cart counts.
- Customer-account records for the portal (email, Stripe customer reference). Payments are processed entirely by Stripe; we never see card numbers.
- Free plugin opt-in records (see above): domain, report email, versions, latest weekly totals, first/last seen dates, and whether you unsubscribed.
- Operational logs (API request metadata) retained briefly for abuse prevention.
What the plugin stores in your store
Cart and visitor analytics live in your WordPress database and are under your control. The plugin integrates with WordPress's personal-data exporter and eraser, includes one-click unsubscribe in every message, can mask or skip IP collection, and can require explicit consent for phone capture. Uninstalling can remove all data if you opt in.
Optional integrations you enable
If you connect them, messages are delivered by the provider you chose — 6rsh (WhatsApp), Twilio or BulkGate (SMS), your email service, or browser push services. Each receives only what delivery requires, under its own privacy policy. The optional geo-flag lookup for the live monitor queries ip-api.com with the visitor IP and can be disabled with one filter.
Your rights
Email support@cartrevival.com to access, correct or delete your account data. Deleting your licence stops all server-side processing; your store's local data stays yours.