Privacy policy
Last updated: October 25, 2026
Abandoned Cart Pro is provided by Pcnaid Inc., 752 N Main St #2194, Mansfield, Texas 76063, United States. Questions can be sent to support@pcnaid.com.
Data the app processes
The app reads abandoned checkout data from Shopify, including customer identifiers and email, line items, totals, discount codes, notes, shipping and billing addresses, and recovery URLs.
Data the app stores
The PostgreSQL database stores Shopify session credentials and staff details, conversion identifiers and outcomes, price-validation results, bulk-job counts and errors, subscription state, usage counters, and privacy-request exports.
It also stores cart snapshots with customer identifiers, email and phone, recovery-message recipients and content, sequence state, suppression records, and storefront visitor identifiers and consent flags.
Where data is stored
Application records are stored in PostgreSQL.
Retention
A confirmed uninstall removes Shopify sessions, subscription state, and integration settings; conversion and bulk-job records are deleted by the later shop-redaction workflow.
Shop redaction also deletes the listed recovery, cart, visitor, suppression, export, and usage records, but preserves lifetime-trial evidence and a shop redaction marker.
Customer redaction deletes matching customer-linked operational records and replaces suppression addresses with hashed markers so the do-not-send block remains in place.
GDPR and deletion requests
The app handles Shopify customer data requests, customer redaction, and shop redaction; data-request exports are stored for the authenticated merchant to download.
Shop redaction is skipped for a still-installed shop and deferred while recovery sends or Shopify conversion writes are in progress.
Security
Shopify authenticates embedded-admin access, and the webhook handler validates the signed request before processing its topic.
Subprocessors
Shopify supplies checkout data and sends native recovery invoices; eligible custom recovery email uses Resend when selected by the merchant.
When configured, Klaviyo receives recovery events with an email address or anonymous resource identifier, shop identifier, and event properties; the merchant’s outbound webhook destination receives event names, shop and resource identifiers, and event payloads.
Error reporting uses Sentry, and configured PostHog telemetry receives installation events identified by shop domain.
Contact
Send privacy questions to support@pcnaid.com.