Privacy Policy
Last updated: July 12, 2026
Welcome to CartCubes. Your privacy is important to us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, purchase our products, or use our apps and services.
Our Terms & Conditions govern use of our services. This Privacy Policy is incorporated into those Terms by reference.
Contact: contact@cartcubes.com
Website: https://cartcubes.com/
1. Who we are
This Privacy Policy explains how CartCubes (“CartCubes,” “we,” “us,” or “our”) collects, uses, and shares information when you:
- visit cartcubes.com and related pages;
- purchase or use our digital products (including WordPress plugins, themes, add-ons, and the CartCubes mobile app for SureCart and FluentCart stores);
- download, install, or receive updates for those products;
- use license keys and activations we provide; and
- use optional features such as push notifications in the CartCubes app.
CartCubes provides tools and extensions for merchants who use SureCart or FluentCart. Our services are aimed at business users and site owners, not at your store’s end customers (shoppers).
2. What this policy covers
Covered
- Our website, checkout, customer account, and support related to plugins, themes, add-ons, and the CartCubes app;
- License validation, activation limits, and update delivery for products you buy from us;
- The CartCubes mobile app and its optional push-notification service; and
- Data we process to operate those services.
Not covered
- Your own SureCart or FluentCart store’s privacy practices toward your customers. You are responsible for your storefront, checkout, and customer-facing privacy policy;
- SureCart’s or FluentCart’s platform privacy practices (payments, hosting of your merchant account). See their policies for how they handle platform data; and
- Third-party WordPress plugins or themes from other vendors — only products sold and supported by CartCubes are described here.
3. Products and services we offer
Through cartcubes.com (and related storefronts we operate) we may sell and license several types of products, for example:
| Type | Examples | Typical data involved |
|---|---|---|
| CartCubes app | Mobile admin app for iOS/Android (and web build) | App license key, store API token, optional push registration |
| Plugins | WordPress plugins for SureCart or FluentCart | License key, site URL for activation, update checks |
| Themes | WordPress themes compatible with those platforms | License key, site URL for activation, update checks |
| Add-ons | Additional modules, integrations, or bundles | Same as plugins/themes, depending on product |
Each product has its own license and terms. A license for a plugin or theme does not automatically license the CartCubes app, and vice versa.
4. Information we collect
4.1 When you buy from us
When you purchase or request support, we (and our commerce stack, including SureCart on our store where used) may collect:
- Identity and contact: name, email address, billing details you provide at checkout;
- Order and license data: products purchased, order history, license keys, activation count and limits, refund/chargeback status;
- Payment-related data: processed by our payment provider (e.g. Stripe). We do not store full card numbers on our servers;
- Account data: if you create a customer account, login identifiers and preferences;
- Communications: support messages, emails, waitlist/newsletter sign-ups, and feedback you send to contact@cartcubes.com.
Some FluentCart products may temporarily be sold on a related storefront we operate. Purchase data from those checkouts is handled under the same principles in this policy.
4.2 When you activate or update plugins, themes, or add-ons
Licensed software may contact our systems (or a license API we use, such as SureCart’s public license API) to:
- validate your license key;
- register an activation (often tied to a site URL or domain you enter);
- check for updates and deliver update packages; and
- enforce activation limits (e.g. number of sites per license).
Information typically includes: license key, product ID, site URL, WordPress/PHP version (if sent for compatibility), and technical identifiers needed to prevent abuse. We use this only to deliver and protect products you paid for, not for advertising.
4.3 When you use the CartCubes mobile app
| Data | Purpose |
|---|---|
| SureCart API secret token | Connects the app to your SureCart merchant account |
| Store label / connection metadata | Identifies connected stores (including multi-store) |
| CartCubes app license key | Unlocks app features where required; links to activations per store |
| SureCart account ID | Stable activation fingerprint per connected store |
| Notification preferences | Store events you want as push alerts (if enabled) |
We do not collect your SureCart login password in the app. API tokens are stored on your device using platform secure storage on native builds (and less protected browser storage on the web build).
4.4 Merchant store data (app only)
When you connect a store, the app reads and may update data via the SureCart API (and optionally your WordPress site running SureCart) according to your token — such as products, orders, customers, subscriptions, coupons, and settings. That is your business data; we use it only to show and manage your store in the app.
4.5 Push notifications (CartCubes app, optional)
If you enable push:
- On your device: Expo push token, installation ID, permission status, per-store preferences;
- On our notification service: license key, store URL, store label, push token, platform, device name, event preferences;
- Delivery: Expo Push; on Android, Google Firebase Cloud Messaging may be used for delivery.
Your SureCart store may send webhooks to our service for events you select. You can disable notifications in the app and on your device at any time.
4.6 Website technical data
Visiting our website may generate server logs (IP address, browser type, pages viewed, referrer, timestamps) and cookies as described in Section 10.
5. How we use information
We use information to:
- process orders and deliver plugins, themes, add-ons, and app licenses;
- issue, validate, and limit license activations;
- provide software updates and security fixes;
- operate the CartCubes app and optional push notifications;
- provide customer support and communicate about purchases, renewals, waitlists, or policy changes;
- prevent fraud, abuse, and license sharing beyond your plan;
- comply with legal and tax obligations; and
- improve reliability and security of our site and services.
We do not:
- sell your personal information;
- use the CartCubes app for in-app advertising or third-party advertising analytics SDKs in the current app build; or
- use your merchant API token for anything other than operating CartCubes when you have connected a store.
6. Legal bases (EEA / UK)
Where GDPR applies:
| Basis | Use |
|---|---|
| Contract | Fulfilling purchases, licenses, app access, updates |
| Legitimate interests | Security, fraud prevention, abuse of license limits, service improvement |
| Consent | Optional push notifications; non-essential cookies; marketing emails / waitlists |
| Legal obligation | Tax, accounting, and lawful requests |
You may withdraw consent for push or marketing communications at any time (see Sections 9 and 10).
7. Where data is stored and processed
| Location | What |
|---|---|
| Your device | App API tokens and license keys in secure storage on iOS/Android; on web, browser storage. App preferences in local storage |
| Your WordPress site | Plugins/themes run on your server; activations may store license state locally |
| SureCart | Our store orders and license records; your connected merchant data when using the app |
| CartCubes servers | Website, license/update endpoints, push registration backend |
| Expo / EAS | Push infrastructure for the app |
| Payment processor | Payment card/wallet processing (e.g. Stripe) |
8. How we share information
We share data only as needed:
| Recipient | Why |
|---|---|
| SureCart | Our checkout, license API, and your merchant API when you use the app |
| Payment processor | Complete purchases (e.g. Stripe) |
| Hosting & email providers | Run the website, deliver emails, support |
| Your WordPress site (optional) | Plugin REST or webhooks you configure |
| CartCubes notification backend | Push registration and webhook routing |
| Expo | Push delivery |
| Google (FCM) | Android push delivery path |
| Authorities | When required by law or to protect rights and safety |
We do not share your merchant customer lists with advertisers.
9. Your choices and rights
Website & licenses
- Update account/billing via customer account flows where available;
- Request access, correction, or deletion: contact@cartcubes.com (we may verify you via your purchase email);
- Deactivate a site activation in the product’s license UI or by contacting support;
- Unsubscribe from marketing or waitlist emails using the link in the message or by emailing us.
CartCubes app
- Disconnect stores (removes the API token from the device);
- Remove license from device or sign in with a different key;
- Disable push and unregister devices in notification settings;
- Uninstall the app.
Rights (EEA/UK and similar laws): access, rectification, erasure, restriction, objection, portability, and complaint to a supervisory authority.
California (CPRA): we do not sell personal information; you may have additional rights — contact us to exercise them.
10. Cookies and similar technologies (website)
We use cookies and similar technologies that are essential for the site to function (e.g. session, security, cart/checkout). We do not use advertising cookies.
We may use basic analytics to understand traffic. You can control cookies in your browser settings. The mobile app does not use browser cookies; it uses on-device storage as in Section 7.
11. Retention
| Data | Retention |
|---|---|
| Orders & licenses | For the life of the product license and as needed for support, renewals, chargebacks, and legal/tax records |
| Activations | While the license is valid or until you deactivate a site |
| App data on device | Until you disconnect, clear license, or uninstall |
| Push registration | Until you unregister or we deactivate your license |
| Support email | As long as needed to resolve issues and for reasonable business records |
| Logs | Short operational periods unless needed for security investigations |
12. Security
We use reasonable technical and organizational measures (HTTPS, access controls, secure token storage on native app builds, license validation). No system is perfectly secure. Protect your license keys and API tokens; revoke API tokens in SureCart if a device is lost.
13. International transfers
We and our processors may process data in the United States and other countries. Where required, we use appropriate safeguards (e.g. Standard Contractual Clauses) for transfers from the EEA/UK.
14. Children
Our services are not directed at children under 16 (or the minimum age in your country). We do not knowingly collect children’s personal data.
15. Third-party links
Our site and app may link to SureCart, FluentCart, your store, documentation, or third parties we do not control. Their privacy policies apply separately.
16. Changes
We may update this policy. The current version will be posted here with a new Last updated date. Important changes may be announced on the site, by email, or in the app.
17. Contact
Privacy requests: contact@cartcubes.com or our Contact Us page.
Website: https://cartcubes.com/