Privacy Policy

This Privacy Policy explains how CartWorks.io collects, uses, and protects information when you install and use the Sortello app ("the App") on your Shopify store. By installing the App, you agree to the practices described here.

1. Who we are

Sortello is a Shopify app operated by CartWorks.io. It helps merchants sort and merchandise the products inside their Shopify collections.
Contact: hello@cartworks.io

2. What information we collect

We collect only the minimum information needed to make the App work. We do not collect personal data about your customers.

From your Shopify store (via the Shopify Admin API):

• Your store's domain name (e.g. your-shop.myshopify.com)
• An access token issued by Shopify that lets the App act on your behalf
• Your collections and the products inside them (titles, images, SKUs, prices, inventory, sales volume, creation dates)
• The collection settings you configure inside the App

We do NOT collect customer names, emails, addresses, phone numbers, payment information, order details, or any data that could identify an individual buyer.

3. How we use your information

We use the information above strictly to:

• Show your collections and products inside the App
• Apply the sort orders, recipes, and auto-OOS toggles you configure
• Re-order products in your Shopify store using the Shopify Admin API
• Handle billing through Shopify's managed subscription system

We do NOT sell your data, share it with advertisers, or use it to train AI models.

4. Where your data is stored

Sortello runs on Cloudflare Workers. Configuration data (your collection settings, plan info, Shopify session token) is stored in Cloudflare D1 (a serverless SQLite database). All data is encrypted in transit (HTTPS/TLS) and at rest.

5. How long we keep your data

While installed: as long as needed to operate the App.
After uninstall: we delete all of your data within 48 hours of receiving Shopify's app/uninstalled webhook. This includes your session token, plan record, and collection settings.
shop/redact request: we delete any remaining data immediately.

6. Customer data requests (GDPR / CCPA)

Sortello does not store customer personal data. We are registered for Shopify's GDPR compliance webhooks:

• customers/data_request — we respond confirming no customer data is held.
• customers/redact — no action needed; no customer data is held.
• shop/redact — we delete all data we hold about the shop.

If you receive a customer data request that you believe involves Sortello, please contact us at hello@cartworks.io and we will respond within 30 days.

7. Third parties

The App uses Shopify (app platform, authentication, billing) and Cloudflare (hosting and database). We do not use third-party analytics, advertising, or tracking inside the App.

8. Cookies

The App only uses cookies that are strictly necessary for Shopify's embedded-app session to function. No marketing or analytics cookies.

9. Children's privacy

The App is not intended for use by anyone under 16. We do not knowingly collect data from children.

10. Changes to this policy

We may update this policy from time to time. Significant changes will be announced on this page with an updated "Last updated" date. Continued use of the App after the change means you accept the updated policy.

11. Contact

Questions, concerns, or data requests:
Email: hello@cartworks.io