Privacy Policy

1. Information we collect

Business information

Information about your store, such as orders, payment methods, shipment status, products, fulfillment information, and related business data, may be collected from the platforms you connect to Causalico. We use this information to provide reports, dashboards, analytics, and related functionality.

Personal information — about you and your team

When you sign up, we collect your email address and password. We do not receive or store your password in plaintext. Authentication is handled by our authentication provider and, optionally, your name. This identifies you and other members of your organization that you invite as users of your organization's Causalico account.

Your customers' information

Causalico does not request Protected Customer Data from Shopify and does not receive your customers' personally identifiable information through our Shopify integration. When you connect a delivery or shipping platform such as Shiprocket, that platform may provide Causalico with your customers' personally identifiable information. We do not use this information to match customers or orders, contact customers, market to them, or for any purpose unrelated to operating and maintaining the connected integration.

Usage, device, and log information

We may collect standard diagnostic information when you use Causalico such as your device and browser type, IP address, timestamps, and request logs to keep the service secure and working.

Cookies and local storage

Causalico does not use third-party advertising or analytics cookies. Our web app stores your sign-in session. You can clear it at any time through your browser settings, which will sign you out.

Connection credentials

Access tokens and API credentials for Shopify, Shiprocket, and any other platform you connect are encrypted at rest (AES-256-GCM) and are never displayed back to you or any third party once saved.

2. How we use your information

Providing and personalizing the service

To compute and display your store's business health metrics.

Account and communication

To maintain your account, keep you signed in, let you manage your organization's connections and settings, and respond to support requests or service-related messages you receive from us (password resets, connection status, and similar account notices).

Service improvement

To diagnose issues, fix bugs, and improve the accuracy and performance of the dashboard, using aggregated, non-identifying patterns wherever possible.

Fraud detection and security

To detect and prevent fraud, unauthorized access, or misuse of the service.

Legal compliance

To comply with applicable law, respond to lawful requests, and meet obligations imposed on us by the platforms we integrate with.

We do not sell your data, your customers' data, or your store's data to anyone, and we do not use it to advertise to you or your customers.

3. Storage and confidentiality

Your information is stored on infrastructure operated by our hosting provider and is not disclosed to anyone outside Causalico except as described in this policy. Storage and transfer of information is carried out using reasonable technical safeguards.

4. Sharing your information

Third-party service providers

We share data only with the service providers that run Causalico on our behalf, each bound by their own security commitments, and only to the extent needed to provide the service such as hosting, authentication, etc.

Connected platforms

Causalico currently integrates with services including Shopify and Shiprocket. When you connect a service, we receive the information made available through that service and authorized by you. This may include store, order, product, payment, fulfillment, shipment, and delivery information, depending on the service and permissions granted. Each platform's own privacy practices govern how it handles your data on its side, and we encourage you to review them.

Business transfers

If Causalico were ever involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We would notify affected account holders before any such transfer, where required by applicable law.

What we don't do

We do not share your business information or personal information with any third party for their own marketing purposes, and we do not sell it.

5. Data transfers

Causalico uses third-party infrastructure and service providers, which may process data in India or other countries. These providers may include our cloud hosting provider, authentication provider, database provider, and other service providers necessary to operate the platform.

6. Your rights and choices

Access, correction, and deletion

You can access, correct, or delete your account information at any time by contacting us. You can request deletion of your account and all associated data at any time by emailing us (see Contact below).

Data portability

You can request a copy of your business information in a structured, commonly used format, subject to reasonable technical limits.

Consent withdrawal

You can withdraw consent to processing at any time by disconnecting a platform or deleting your account; this does not affect the lawfulness of anything already done before withdrawal.

If you're a customer of a Causalico merchant

If you're a customer of a store that uses Causalico and want to know what data of yours has passed through our systems, or want it deleted, please contact that store first as they control your relationship as their customer. If they're unable to help, you can reach us directly (see Contact below), and we will respond consistent with Shopify's data-protection requirements for apps, including verified data access and redaction requests.

Right to lodge a complaint

If you believe we haven't adequately addressed a privacy concern, you can write to us (see Grievance Redressal below).

7. Retention of information

We retain data for as long as reasonably necessary to provide the Causalico service, maintain historical analytics requested by the merchant, comply with legal obligations, resolve disputes, and enforce our agreements. When data is no longer required for these purposes, we will delete or anonymize it in accordance with our applicable retention practices.

8. Data security

Connection credentials are encrypted at rest. All traffic to and from Causalico is encrypted in transit (HTTPS). Access to production data is limited to the people operating the service. We use access controls and organization-level authorization to prevent one merchant from accessing another merchant's data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Children's privacy

Causalico is a business tool intended for use by merchants and their staff. It is not directed at, and we do not knowingly collect information from, individuals under 18.

10. Changes to this policy

We may update this policy from time to time to reflect changes in our practices, legal requirements, or the services we offer. We will notify account holders by email in case of an update. Your continued use of Causalico after an update takes effect means you accept the revised policy.

11. Grievance redressal

For any grievance or complaint about how your information is handled, please write to us at supriya.tiwari137@gmail.com.

12. Governing law and jurisdiction

This policy is governed by the laws of India, and any dispute arising from it is subject to the exclusive jurisdiction of the courts of India.