Privacy Policy for Normalize Cart Drawer

Last updated: June 14, 2026

Introduction

This Privacy Policy explains how Normalize (“we”, “us”) collects, uses, shares, and protects information when a merchant installs or uses the Normalize Cart Drawer app (the “App”) from the Shopify App Store, and when shoppers interact with the cart drawer on a merchant’s storefront.

Information We Collect

When you install the App, we access and process the following through Shopify’s APIs, limited to the permissions (access scopes) you grant at installation:

• Store and account information — your myshopify.com domain, store name, contact email, and store owner name. Used to create your account, operate the App, and provide support.
• Order metadata — to power order-based billing tiers and your in-app analytics, we record non-identifying order data: the Shopify order ID, order number, order name (for example, #1001), total amount, and currency. We do not store buyer names, email addresses, shipping addresses, or payment details.
• Theme information — read-only, used to detect whether the App’s storefront embed is enabled.
• App configuration — the cart drawer designs, templates, and settings you create, stored so we can render your drawer on your storefront.

Shopper and Storefront Data

We do not collect or store buyer personal information. The cart drawer runs entirely in the shopper’s browser using Shopify’s native storefront cart. Your drawer configuration is delivered inline with your theme, so the drawer does not call our servers to function and does not transmit shopper personal data to us.

Support Tools

When you use the in-app support chat, we use Crisp (crisp.chat) to operate the chat widget. Crisp may receive your email address and store domain so we can respond to your inquiry. We do not use Google Analytics, advertising networks, or tracking pixels within the App.

How We Use Information

• Operate and provide the App’s features.
• Authenticate your store and keep your configuration in sync.
• Determine order-based billing tiers and display analytics in your Shopify admin dashboard.
• Provide customer support and respond to your inquiries.
• Comply with legal obligations and Shopify’s platform requirements.

We do not sell or rent your data or your shoppers’ data, and we do not use it for advertising.

How We Share Information

We share information only with:

• Shopify, as required to operate within the Shopify platform.
• Service providers that help us run the App (for example, our database hosting provider and Crisp for support chat), bound by appropriate data-protection obligations.
• Authorities, where required by applicable law, regulation, or legal process.

Data Retention and Deletion

We retain your store configuration and non-identifying order metadata for as long as the App is installed. When you uninstall the App, or upon a verified request, we delete the associated data. We honor Shopify’s mandatory privacy webhooks (customers/redact, customers/data_request, and shop/redact). Because we do not store buyer personal information, there is typically no shopper data to return or erase.

Your Rights (GDPR / CCPA)

Depending on where you live, you may have the right to access, correct, delete, or restrict the processing of your personal information, and to request data portability. To exercise these rights, contact us at hello@usenormalize.com. A merchant’s shoppers should direct requests to the merchant (the data controller), who can relay them to us through Shopify’s privacy webhooks.

International Transfers

Your information may be processed in countries other than your own, including Canada and the United States, with appropriate safeguards in place.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for operational, legal, or regulatory reasons. Material changes will be reflected by the “Last updated” date above.

Contact Us

For questions about this policy or our privacy practices, or to make a complaint, contact us at hello@usenormalize.com.