Privacy

1. 1Your account e-mail address (we never see your password)
2. 2Your shop: its name, products, prices, delivery fees and settings
3. 3Buyers' names, phone numbers and addresses, as the buyers typed them at checkout
4. 4Images and videos you upload, including payment slips
5. 5Your plan invoices and the transfer slips attached to them
6. 6Basic technical logs, so the system runs and abuse can be spotted

The database and the user accounts are on Supabase in Singapore. Images, videos and slips are on Cloudflare R2.

Your shop and its orders are visible to you and to the team members you invite, with the permissions you gave them. LaoCart staff can look when it is needed to help you with a problem or to check a payment.

We do not sell data, and we never pass your customer list to another shop.

Your customers' names, phone numbers and addresses are your shop's data. Use them to deliver and to talk about the order — do not pass them to anyone else.

At the last step of the checkout a buyer may leave an e-mail address (optional) to receive the updates of that order: what was ordered, once the shop has confirmed the payment, and a message when the shop ships it. LaoCart sends these e-mails in the shop's name, uses the address for that order only, sends no advertising to it and does not show it in the shop's dashboard. A shop can switch this service off in its settings.

While the shop is alive, the data stays. After a shop closes we keep it for 30 more days so you can come back, and then delete it permanently.

A shop that is created but never opened is deleted after 60 days. We send reminder e-mails first.

Questions you ask the assistant (on laocart.com or in your dashboard) are sent to Anthropic (the company that makes the Claude AI) to be answered. We keep the questions and answers for 90 days to improve the assistant, then delete them. For people who are not signed in we keep no name and no IP address: only a scrambled code of the connection and a 2-hour conversation cookie, to stop abuse. Never put a password or a bank account number in a question.

1. 1A session cookie — so you stay signed in
2. 2A language cookie — it remembers the language you picked
3. 3A preview cookie — used when you look at a shop before it opens

On laocart.com's public pages (never in the seller dashboard, never on the sign-in pages) we use the Meta (Facebook) pixel to measure our own ads: it sets an advertising cookie (_fbp) and tells Meta which of our pages you visit. When you create an account we also tell Meta that an account was created, never your name, e-mail, phone or the address of the page. Each shop may add its own pixel to its storefront.

When you leave your number on laocart.com (the waiting list, a request for automatic payment confirmation, or the giveaway), we keep what you typed: your name, your WhatsApp number, what you sell or your project, your Facebook or TikTok name for the giveaway, the page you used and the time. We also keep a code made from your internet address — never the address itself — so that one computer cannot fill the forms.

We use it to answer you on WhatsApp, to run the giveaway (to check the conditions, and to contact and announce the winners) and, after the giveaway, to tell you about LaoCart once. Tell us to stop and we will not write again.

After the draw we publish the entry list so that anybody can check it: entry numbers, networks and times, a person number instead of any phone number, and names only for the winners and the reserves. Your phone number is never published.

We delete giveaway entries 12 months after the draw (the winners' are kept while their prize runs), and waiting-list numbers 12 months after we last spoke. Ask us on WhatsApp to delete yours sooner.

A seller may connect a Facebook Page to LaoCart to sell during live videos. Facebook then sends us the comments written under that Page's live videos and posts: the commenter's public name, the identifier Facebook gives that Page for them, the text and the time. We use them only to reserve what the comment asks for, to answer on the seller's behalf (one private Messenger message, and a reply under the comment when the seller switched it on), and to show the seller the orders and the report of their live.

A buyer who orders from a shop's live page types a name and a phone number: they are that shop's data, like any order. On the video, a seller may show the first name of the latest buyers, never a phone number.

Live comments are deleted after 90 days; the name and number on a buyer's live page are erased after 180 days. The access a seller gives us to their Page is stored encrypted, is used for nothing else, and is removed when the seller disconnects the Page or removes LaoCart from their Facebook settings. To have your comments or your data deleted sooner, write to contact@laocart.com or on WhatsApp.

To correct or delete your data, or to get a copy of it, write to us on WhatsApp. We will confirm that the account is yours first.