Privacy Policy

Last Updated: January 15, 2025

1. Introduction

Welcome to PlugtoCart ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI Commerce Protocol infrastructure and chat demonstration platform.

PlugtoCart is a technology infrastructure provider that enables AI agents to interact with merchant catalogs through standardized protocols. Our chat platform is a demonstration of this infrastructure and is not an e-commerce store.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

  • Email address
  • First and last name
  • Password (encrypted)
  • Profile information (if provided via OAuth providers like Google)

2.2 Usage Information

We automatically collect information about your interactions with our platform:

  • Chat messages and queries
  • Product browsing history
  • Session data and timestamps
  • Device information and browser type
  • IP address and general location data

2.3 Information We Do NOT Collect

We explicitly do NOT collect, store, or process:

  • Payment card details (credit/debit card numbers, CVV, etc.)
  • Banking information
  • Financial transaction data
  • Purchase completion data

Important: PlugtoCart is not an e-commerce platform. We are a technology infrastructure provider. Any transactions initiated through our demonstration platform are completed on merchant websites. We do not process, store, or have access to your payment information.

3. How We Use Your Information

We use the collected information for:

  • Service Provision: To provide and maintain our AI Commerce Protocol infrastructure
  • Platform Demonstration: To showcase how AI agents can interact with merchant catalogs
  • Account Management: To create and manage your user account
  • Communication: To send you service-related notifications and updates
  • Improvement: To analyze usage patterns and improve our technology
  • Security: To detect, prevent, and address technical issues and fraudulent activity

4. Data Sharing and Disclosure

4.1 Merchant Partners

When you interact with product catalogs, we share minimal necessary information with merchant partners to facilitate product discovery and enable you to complete purchases on their platforms.

4.2 Third-Party Services

We may share data with:

  • Authentication providers (e.g., Google OAuth)
  • Analytics services for platform improvement
  • Cloud infrastructure providers for data storage and processing

4.3 Legal Requirements

We may disclose your information if required by law or in response to valid legal requests.

5. Data Security

We implement industry-standard security measures to protect your information, including:

  • Encryption of data in transit (TLS/SSL)
  • Encrypted password storage
  • Secure authentication mechanisms
  • Regular security audits and updates

However, no method of transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Your Rights and Choices

You have the right to:

  • Access: Request a copy of your personal data
  • Correction: Update or correct your information
  • Deletion: Request deletion of your account and associated data
  • Opt-Out: Unsubscribe from marketing communications
  • Data Portability: Request your data in a machine-readable format

To exercise these rights, contact us at [email protected]

7. Cookies and Tracking Technologies

We use cookies and similar technologies to maintain your session, remember your preferences, and analyze platform usage. You can control cookie settings through your browser, but disabling cookies may limit platform functionality.

8. Third-Party Links

Our platform may contain links to merchant websites and third-party services. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

9. Children's Privacy

Our platform is not intended for users under 13 years of age. We do not knowingly collect personal information from children. If we become aware of such collection, we will delete the information immediately.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.

11. Data Retention

We retain your personal information for as long as necessary to provide our services and comply with legal obligations. When you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last Updated" date. Your continued use of the platform after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: