Privacy and legal
Privacy Policy
- Version
- 2026-10-20-2
- Applies from
- 20 October 2026
- Status
- Replaced (20 October 2026)
- Fingerprint (SHA-256)
29a79763a49699ce21e0079c9e3537638148923daf70ab821d284031a8560541
The fingerprint of the text below, exactly as published. Your dashboard records the fingerprint of the version your shop accepted.
This version was replaced. The version that applies now: 2026-10-20-3. Every version
This policy explains how Uncart handles personal data on the uncart.ai website, in the Uncart merchant app (dashboard and Shopify/Shopware app), and in the WhatsApp and SMS messages Uncart sends and answers on behalf of shops.
Who we are
Uncart is a trading name of Woomega LLC, 2810 N Church St STE 90071, Wilmington, DE 19802, United States. Contact: hi@uncart.ai.
Uncart has two roles, depending on whose data it is:
| Whose data | Uncart's role | Who decides how it is used |
|---|---|---|
| Shoppers who message a shop through Uncart, on the shop's own WhatsApp number | Processor, on the shop's behalf | The shop (the controller) |
| Shoppers of a shop that sends from Uncart's own WhatsApp number | Controller, for the messages on Uncart's number | Uncart (and the shop, for its own shop data) |
| Merchants who use the Uncart app, and visitors to uncart.ai | Controller | Uncart |
If you are a shopper, the shop you bought from or chatted with is responsible for your data. Uncart processes it only to run that shop's messaging, under a data processing agreement with the shop. You can still contact Uncart directly, and we will pass your request to the shop or act on it where we can.
Some shops have no WhatsApp number of their own and send from Uncart's own WhatsApp number; the first message of each conversation, and every reminder, then names the shop and Uncart. For those messages Uncart is responsible for the data it needs to send them: your number, your consent and your STOP, your messages on Uncart's number, and the basket or product you wrote about. The shop stays responsible for its own shop data, such as your orders and your customer account there.
If you are a shopper
Uncart only messages you after you opt in, or to answer a message you sent, and it stops for good when you write STOP. We process your data on behalf of the shop, for these purposes only: confirming your opt-in, reminding you about your basket, sending you the order and delivery updates you asked for, telling you once when something you asked about is back in stock or cheaper, answering your questions, and recording which orders came through Uncart so the shop can be billed.
What we hold, and where it comes from
| Data | Where it comes from | Why |
|---|---|---|
| Your mobile number (encrypted) and a keyed fingerprint of it | You, when you opt in on the shop's site or message the shop | To send and receive messages, and to recognise your STOP |
| Your consent record: channel, what it is for (order updates, basket reminders, or news and offers), how you opted in, the wording version, the time | Created when you opt in or out | To prove you agreed, and that we stopped when you asked |
| Your messages with the shop and the assistant (encrypted) | You and the shop | To answer you and let the shop step in |
| Your basket: products, quantities, value, the shop's basket and checkout tokens | The shop (Shopify or Shopware) | To remind you about what you left |
| The product you asked about, if you wrote with the shop's "Questions? Message us on WhatsApp" button: the shop's product and variant ids. The ready-made message carries a short code that names only the product, never you | The shop's product page, and your message | To answer your question about that product |
| Whether we asked if you would like to stay in touch with the shop on WhatsApp, and your answer | Uncart | To ask only once, and to record your yes |
| Orders placed after an Uncart message or link: order number, value, refunds | The shop | To credit the order to Uncart and bill the shop |
| Order updates you asked for: the order's number, when it shipped and was delivered, and the carrier's tracking link (encrypted) | The shop (Shopify) | To send you the order and delivery updates you asked for |
| Back-in-stock requests you made: the product and the size or colour, how you asked (in the chat or with the product page's button), WhatsApp's id of your request, the wording version, the time, and whether the message was sent | You, in the chat or with the product page's button | To send you the one message you asked for when it is back |
| Price-drop requests you made: the product and the size or colour, its price when you asked, how you asked (in the chat or with the product page's button), WhatsApp's id of your request, the wording version, the time, and whether the message was sent | You, in the chat or with the product page's button | To send you the one message you asked for if the price drops |
| Your customer id at the shop, if you were signed in | The shop | To link your basket to your opt-in |
| Whether you are in the comparison (holdout) group | Calculated by Uncart | To measure whether reminders help, without profiling you |
We do not store your IP address, browser details, email address, postal address or payment details. The shop's site does not set an Uncart cookie.
A question is not an opt-in. Writing to the shop with the "Questions? Message us on WhatsApp" button, or asking for your basket with the "Send my basket to WhatsApp" button, lets the shop answer you there, in the 24 hours after your message. It never signs you up for any messages. After the shop's first answer, or after sending the basket you asked for, we ask you once whether you would like to stay in touch with the shop on WhatsApp (order updates, reminders about your basket, and news and offers). Only your own yes (a tap on "Yes" or a typed "yes") is recorded as your consent; after a "No" we do not ask again for 90 days. A back-in-stock or price-drop request is not an opt-in either: you get one message when the product is back, or when its price drops, and nothing else.
Legal basis. Your consent (GDPR Art. 6(1)(a)) for messages you opted into; the shop's legitimate interest (Art. 6(1)(f)) for answering messages you send and for order attribution; legal obligation (Art. 6(1)(c)) for keeping proof of your consent and of a deletion.
Your choices. Write STOP at any time. You get one confirmation and nothing after it. Only you can opt in again, from your own WhatsApp.
The AI assistant
The assistant's first reply always says it is an AI. Uncart removes phone numbers, email and postal addresses, payment and ID numbers, and names it recognises before any text reaches the AI model. It also removes birth dates and order and tracking numbers.
- What the model sees: the shop's name and tone, your basket or the product you asked about (its description, specs and collections, sizes, prices and live stock, and a short description of its photo), size guide, delivery, payment and returns terms, the shop's rules, and the conversation with those details removed.
- Product photos: Product images are read by the AI provider to describe colour, shape and style, once per product, and again when the product changes or after 30 days. No shopper data is involved.
- Which model: Anthropic's Claude, through Anthropic's API, provided by Anthropic, PBC. Requests are processed in the United States and other countries where Anthropic runs its service. Text reaches the model only after the details above are removed, as far as Uncart recognises them. Anthropic does not use API data to train models by default.
- Checks: every reply is checked before it is sent, by fixed rules and by a second AI check. A reply that might invent stock, prices or discounts, or ask for personal data, is replaced by a standard reply.
- No profiling and no automated decisions with legal or similarly significant effects.
If you are a merchant or visit uncart.ai
For this data Uncart is the controller.
| Data | Why | Legal basis |
|---|---|---|
| Account: email, sign-in records, an encrypted authenticator secret, fingerprints of recovery codes and known devices | To let you and your team sign in securely | Contract, Art. 6(1)(b) |
| Shop address you type on the Log in or Install page | To find your shop and start the connection; it is not stored | Contract, Art. 6(1)(b) |
| Your IP address, sent to our sign-in provider during sign-in | To block risky sign-ins and breached passwords | Legitimate interest, Art. 6(1)(f) |
| Shop connection: shop address, name, time zone, settings, encrypted access tokens for Shopify, WhatsApp and Twilio | To run the service for your shop | Contract |
| Billing: shop name, amounts, Stripe customer and payment-method ids (you enter card or bank details on Stripe's own page); for shops on Shopify, Shopify's ids of Uncart's subscription and charges | To bill you | Contract; legal obligation for records |
| Audit log of settings changes (who and when, never your email) | Security and accountability | Legitimate interest |
| Emails you send to hi@uncart.ai | To reply | Contract or legitimate interest |
Cookies. The uncart.ai website sets no cookies and uses no analytics or third-party content. If you switch between light and dark mode, your browser remembers that choice on your device; nothing is sent to us. Its access logs are off. The merchant dashboard sets only strictly necessary cookies: a sign-in session (ends after 30 minutes idle, 8 hours at most), a short sign-in step, and a device cookie (1 year) used to warn you about sign-ins from new devices. The demo sets a 7-day cookie with the invited name.
Who else processes data
Data is stored in Frankfurt, Germany (AWS eu-central-1). These providers process data for Uncart:
| Provider | What for | Location |
|---|---|---|
| Amazon Web Services EMEA SARL | Hosting, database, encryption keys, sign-in (Cognito), email (SES), logs | Frankfurt; website delivery worldwide via CloudFront |
| Anthropic, PBC (Claude API) | Writing assistant replies, with personal details removed; describing product photos (no shopper data) | United States and other countries where Anthropic runs its service |
| Meta Platforms Ireland Ltd | Sending and receiving WhatsApp messages | EU, possibly US |
| Twilio Inc. | WhatsApp messaging for shops connected through Twilio | US |
| Stripe | Billing merchants (no shopper data) | US/EU |
| Shopify / Shopware | The shop's own platform, which sends Uncart basket and order events | Per the shop |
Where data goes outside the EU, to the United States or another country, transfers rely on the EU–US Data Privacy Framework where it applies, and otherwise on the European Commission's Standard Contractual Clauses. No SMS provider is in use yet. We give shops 30 days' notice before adding a new sub-processor.
Twilio keeps its own log of the messages it delivers for shops connected through Twilio, under its own retention terms; when you ask to be deleted, Uncart also asks Twilio to delete your messages from that log. Anthropic keeps the requests Uncart sends it under its own retention terms.
How long we keep data
Deletion runs automatically every day. Database backups are kept for 7 days, so deleted data leaves the backups within 7 days.
| Data | Kept for |
|---|---|
| Baskets and queued messages | 30 days |
| Conversations and messages | Up to 90 days (the shop can choose 60 or 30) |
| Opt-in steps not completed | 7 days after they lapse |
| Order updates you asked for, with the tracking link | 30 days after delivery, at most 90 days |
| The product codes in the ready-made messages of the "Questions? Message us on WhatsApp", back-in-stock and price-drop buttons (they name a product, never you) | 30 days |
| Back-in-stock requests | 90 days if no message was sent, or 30 days after it was sent; at once when you write STOP or ask to be deleted |
| Price-drop requests | 90 days if no message was sent, or 30 days after it was sent; at once when you write STOP or ask to be deleted |
| Your number, if you only asked the shop a question and never opted in | As long as that conversation is kept, then erased |
| Links sent in messages, and their tap counts | 30 days after sending, or 3 days after the last tap |
| Orders credited to Uncart, holdout group, refunds | 12 months; the order number goes when you ask to be deleted, but invoices to the shop, which tax law requires us to keep, can still name the order number |
| A shopper with no activity | Erased after 24 months |
| Record that you wrote STOP or "Not me" | 24 months, so we never message you again; kept even after you ask us to delete your data |
| Proof of consent and of a deletion (a fingerprint, never your number) | 3 years |
| Server logs (they contain no phone numbers or message text) | 1 month |
| Merchant account data | Until the account is closed |
| Billing records | As tax law requires (up to 10 years) |
How to delete your data
You can have your data deleted at any time, free of charge. See uncart.ai/data-deletion for the steps.
How we protect data
- Phone numbers, messages and access tokens are encrypted with AWS KMS keys held in Frankfurt; each value is bound to its shop, so one shop's data cannot be opened as another's.
- Each shop's data is walled off in the database, and no shop can read another's.
- Logs never contain phone numbers or message text.
- Our team signs in with two factors, and sessions end after a short idle time.
- Every change to settings and every admin action is recorded in an audit log that cannot be edited.
- Messages from Shopify, Shopware and WhatsApp are checked for a valid signature before we act on them.
Your rights
You can ask for a copy of your data, for corrections, for deletion, or object to processing. Write to hi@uncart.ai. You can also complain to a data protection authority, such as the ICO in the UK or the authority in your EU country.
Changes and contact
We will post any change to this policy here, with its date, and tell shops 30 days before a change that affects them. Questions or requests: hi@uncart.ai, or write to Woomega LLC, 2810 N Church St STE 90071, Wilmington, DE 19802, United States.