Privacy Policy
Last updated: June 5, 2026
Cartlyt (“Cartlyt,” “we,” “us”) is an AI shopping assistant that compares prices across retailers. This policy explains what we collect, why, and your choices. We built Cartlyt around a simple promise: we don't sell your data, show ads, or take affiliate kickbacks.
Information we collect
Account data — your name, email, and password (stored hashed) when you register, or your Google profile if you sign in with Google.
Usage data — your searches, watchlist items, price alerts, and shopping preferences, so the assistant can do its job.
Billing data — if you subscribe, payments are handled by Stripe. We store your subscription status and a Stripe customer ID, but never your full card number — Stripe holds that.
Technical data — basic, privacy-preserving analytics (page views and aggregate events) to understand and improve the product. We do not build advertising profiles.
How we use your information
- To provide price comparisons, trust scores, and alerts.
- To personalize results to your stated constraints and preferences.
- To send account and transactional email (verification, password reset, price alerts).
- To send optional product tips and updates, which you can unsubscribe from at any time.
- To process subscriptions and prevent fraud and abuse.
Service providers we share with
We share the minimum necessary data with trusted processors:
- Stripe — payment processing.
- Resend — transactional and lifecycle email delivery.
- Anthropic — the AI model that powers the assistant. Search queries are processed to generate results.
- Retailer/product data APIs — to fetch live prices and listings.
- Vercel — hosting and infrastructure.
We do not sell your personal data, and we do not share your watchlist or search history with advertisers.
Cookies
We use essential cookies for authentication and security. We do not use third-party advertising cookies.
Data retention & security
We retain your data while your account is active. You can delete your account at any time, after which we remove your personal data (subject to legal and billing-record obligations). We use industry-standard measures including encryption in transit and hashed passwords.
Your rights
Depending on where you live (including under GDPR and CCPA), you may have the right to access, correct, export, or delete your personal data, and to opt out of marketing email. To exercise these rights, contact us at support@cartlyt.com.
Children
Cartlyt is not directed to children under 13, and we do not knowingly collect their data.
Changes & contact
We may update this policy; material changes will be noted by the “last updated” date above. Questions? Email support@cartlyt.com.