Privacy Policy

The short version

• We collect what we need to run DPCart and nothing more.
• Our own website uses no third-party analytics, ad pixels or tracking scripts.
• We never sell personal data.
• Your buyers' data belongs to you, the seller. We process it only to run your checkout.

1. If you join the waitlist

When you join the early-access list we store:

• your email address and your answers (what you sell, your monthly sales range, the platform you use, and whether you're open to a call);
• which version of our pricing you were shown;
• the campaign tags in the link you arrived from (utm_source, utm_medium, utm_campaign, utm_term, utm_content) and the website that referred you, without its query string.

We use this to contact you about early access, to arrange a call if you asked for one, and to decide what to build and how to price it. We send a confirmation email when you join and will email you when your spot opens. To be removed, email hello@dpcart.co and we'll delete your entry.

2. Visiting our website

• We count page views on our server as daily totals (by pricing version and campaign source). We do not record your IP address, device or browser details for analytics, and we don't build a profile of you.
• To stop spam, we keep a short-lived count of form submissions per IP address in memory. It is never written to disk and is discarded within minutes.
• Our hosting provider keeps standard server logs for security and debugging, which are deleted on a rolling basis.

3. Cookies

• dpcart_variant: remembers which pricing version you saw so you see the same price when you come back. It contains only the letter "a" or "b".
• dpcart_session: keeps you logged in if you have a DPCart account.
• dpcart_buyer: keeps a buyer logged in to a seller's customer portal.

We don't use advertising or cross-site tracking cookies.

4. If you have a DPCart account

We store your account details (name, email, a hashed password), your store settings, your Stripe account ID, and the records needed to run your checkouts and deliver your products. We bill you for your DPCart plan and keep billing records as the law requires.

5. Buyers' data

When someone buys from a DPCart seller, the seller is responsible for that buyer's data and DPCart processes it on the seller's behalf. Card details are collected by Stripe and stored in the seller's own Stripe account; DPCart never sees or stores full card numbers. We store order, delivery and download records so buyers can get what they paid for. Buyers with questions about their data should contact the seller first; we will help sellers respond.

6. Who we share data with

We use a small number of service providers, only to run DPCart:

• Stripe: payments, on each seller's own Stripe account.
• Railway: application hosting and database.
• Postmark: sending email.
• Cloud file storage: storing sellers' product files.

We may disclose data if the law requires it. We never sell personal data or share it for advertising.

7. How long we keep data

• Waitlist entries: until early access has launched and you've had the chance to sign up, or until you ask us to delete them.
• Seller accounts: while the account is open, then 90 days for export before deletion, except records the law requires us to keep.

8. Your rights

You can ask us for a copy of your personal data, to correct it, or to delete it, by emailing hello@dpcart.co. Sellers can export their own data at any time from the dashboard. Depending on where you live you may also have the right to object to processing or to complain to a data protection authority.

9. Contact

Privacy questions: hello@dpcart.co. The data controller's legal details will be added after legal review.