GoCart Privacy Policy
Effective Date: September 2026 · Platform Version: 2.4.0
All card credentials and bank payouts are processed directly by Stripe PCI-DSS Level 1 infrastructure.
Merchants cannot access competing sellers' sales figures or shopper carts across stores.
You can request complete deletion of your account and personal history at any time.
1. Information We Collect
GoCart collects only the data strictly required to deliver a reliable, multi-store shopping experience:
- Account Data: Full name, verified email address, profile picture, and role credentials authenticated via Clerk.
- Order & Parcel Data: Delivery addresses, selected parcel splits, fulfillment timestamps, and delivery tracking references.
- Seller Business Credentials: Store names, logos, announcement banners, return policy matrices, and Stripe Connect onboarding IDs.
- Diagnostics & Feedback Telemetry: Optional browser user agent, operating system, and viewport dimensions captured to reproduce bugs when you submit feedback.
2. How We Use Collected Data
We use your information exclusively to:
- Authenticate sessions and prevent unauthorized access or account takeovers.
- Coordinate split parcel shipments across distinct independent sellers in a single checkout.
- Calculate daily streak check-ins, reward loyalty coin ledgers, and apply coupons.
- Arbitrate return requests and disputes with cryptographically verifiable evidence.
- Protect the marketplace from automated scraping, credential stuffing, and bot submissions.
3. Multi-Tenant Data Boundary Protection
GoCart enforces database-level tenant boundary isolation. Each seller operates exclusively within their own store scope. No seller has administrative privileges or database access to view other vendors' transactions, customer browsing behavior, or financial ledgers.
4. Security Safeguards & Encryption
All communications over the wire are encrypted using TLS 1.3. Persistent database records are hosted on isolated cloud infrastructure with row-level permission guards. Cloudinary media uploads are sanitized to prevent server-side request forgery (SSRF) and malicious file execution.
5. Your Rights & Data Erasure
You retain full ownership of your personal data. You may request an export of your transaction history or full account deletion at any time by contacting us: