QartoosPrivacy policy
Draft for legal review · October 30, 2026
This policy explains how Mirav Labs ("we") handles personal information when you use Qartoos to create and run a shop. Each shop on Qartoos is run by its own seller, who has their own privacy policy for their customers; for shoppers' information we act as the seller's service provider.
What we collect
- Account details: your name, email, password (stored only as a secure hash), and phone if you give it.
- Shop details: your shop's name, address, settings, products and content.
- Payments and shipping: the id of the Stripe account you connect and its status (Stripe holds your identity and bank details, not us), and your Shippo API token, stored encrypted.
- Usage: pages visited and actions taken in the admin, counted without third-party trackers, and technical data such as IP address and browser, for security and to fix problems.
How we use it
To run your shop and account, process sign-in and security, send service emails (order alerts, password resets, notices about your shop and these policies), provide support, prevent fraud, and improve the service. We send marketing emails only if you agree, and every one has an unsubscribe link.
Who we share it with
Service providers that run the platform for us (hosting, email delivery), Stripe and Shippo when you connect them, and authorities when the law requires. We do not sell your personal information or share it for cross-context behavioral advertising.
How long we keep it
While your account is open, and afterwards only as long as needed for legal, tax, security and dispute purposes.
Your rights
Depending on your state (including California, Colorado, Connecticut, Virginia and others), you can ask to know, access, correct or delete your personal information, and to opt out of its sale or sharing (which we don't do). Email support@example.com; we'll verify your request and reply within 45 days. We won't treat you differently for using these rights. You can also download your shop's data from your admin at any time.
Children
Qartoos is for businesses and isn't directed at children under 13; we don't knowingly collect their information.
Security
We use encryption in transit, hashed passwords, encrypted storage of connected-service keys, and access controls. No service is perfectly secure; tell us at once if you think your account was misused.
Contact
Mirav Labs, 123 Main Street, Wilmington, DE 19801 · support@example.com