Comment Cart

Privacy Policy

Last updated: August 29, 2026

CommentCart is a software platform that helps businesses automate interactions with customers through supported social media platforms, including responding to comments and sending configured messages, links, and other information. We also provide storefront and related technology for independent vendors.

CommentCart is not the seller or merchant of record for products sold by vendors using the platform.

1. Information We Collect

Vendor Account Information

When vendors sign up for CommentCart, we may collect:

Name, email address, business or store information, subscription and billing details, storefront settings, product and media mappings, automation configuration, and related account information.

Meta, Facebook, and Instagram Connection Data

When a vendor connects a supported Meta account, Facebook Page, or Instagram professional account, we may collect and store information made available through Meta's APIs and authorized permissions, including:

Instagram business account ID, Instagram username, Facebook Page ID and Page name, account or Page connection information, access tokens, token expiration information, granted permission information, and connection status metadata required to operate and secure the service.

Social Media Interaction Data

To provide comment-triggered and messaging automation, we may process information made available to us through supported third-party platforms, including:

Comment text, comment IDs, media or post IDs, usernames, platform user IDs when provided by the applicable platform, timestamps, configured or matched keyword information, message and reply events, delivery status, and information necessary to prevent duplicate or unauthorized automation.

The specific information available to CommentCart depends on the permissions granted by the vendor and the information made available by the applicable third-party platform.

Storefront and Product Data

Vendors may provide product information, product links, storefront information, WhatsApp contact links or information, images, offers, and other content necessary to configure their CommentCart storefronts and automation.

Usage and Technical Data

We may collect technical and operational information necessary to operate, secure, troubleshoot, and improve CommentCart. This may include application events, automation events, timestamps, error information, security events, usage counts, and similar diagnostic information.

Billing and Payment Data

Vendor subscription payments are processed by third-party payment providers such as Stripe. We do not store full payment card numbers on our servers.

2. How We Use Information

We use collected information to:

  • Provide vendor login and account management.
  • Connect supported Meta, Facebook, and Instagram accounts.
  • Detect comments or interactions that match vendor-configured automation rules.
  • Send configured public replies, private replies, messages, links, or other supported automated responses.
  • Operate optional automation features enabled by vendors.
  • Generate analytics and usage information for vendors.
  • Prevent duplicate replies, spam, fraud, or abuse.
  • Apply rate limits, throttling, or other safeguards when appropriate.
  • Provide customer support and troubleshoot technical issues.
  • Maintain the security and reliability of CommentCart.
  • Manage subscriptions, billing, and account administration.
  • Comply with applicable legal and regulatory obligations.

3. How We Share Information

We do not sell personal data.

We may share or process information with service providers and platforms when necessary to provide, secure, and operate CommentCart. These may include:

  • Meta and its services, including Facebook and Instagram, for supported social media integrations.
  • Stripe or other payment processors for subscription billing.
  • Database, authentication, infrastructure, and storage providers such as Supabase.
  • Hosting, monitoring, logging, security, email, and other technical service providers used to operate CommentCart.

We may also disclose information when reasonably necessary to comply with applicable law, regulation, court order, or legal process; to enforce our agreements; or to protect the rights, safety, security, and integrity of CommentCart, our users, or third parties.

4. Meta Platform Data

Information received through Meta, Facebook, or Instagram is used to provide and support the functionality authorized by vendors and permitted by the applicable platform.

CommentCart's access to and use of information received from Meta products is subject to applicable Meta platform terms, permissions, and policies.

Vendors may disconnect their Meta or Instagram connection from CommentCart. Disconnecting an account stops future automation that depends on that connection.

5. Data Retention

We retain information for as long as reasonably necessary to provide the service, maintain security and operational records, prevent fraud or abuse, resolve disputes, comply with legal obligations, and enforce our agreements.

Different categories of information may be retained for different periods depending on their purpose, applicable requirements, and operational needs.

When a vendor disconnects a supported third-party account or requests deletion, we will delete or de-identify associated information within a reasonable period when required, subject to legitimate legal, security, fraud-prevention, dispute-resolution, and backup retention requirements.

6. Data Deletion

Vendors may request deletion of their CommentCart data by contacting us at [email protected].

Vendors may also disconnect supported social media connections from the CommentCart dashboard, which stops future automation dependent on those connections.

For more information, please see our Data Deletion Instructions.

7. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information, including secure transport, access-controlled systems, and restricted backend access.

However, no method of electronic transmission, processing, or storage is completely secure, and we cannot guarantee absolute security.

8. Third-Party Services

CommentCart relies on third-party platforms, APIs, infrastructure, and service providers, including Meta, Facebook, Instagram, payment processors, hosting providers, and database providers.

Your use of third-party services may also be subject to those third parties' own terms, privacy policies, and data practices. CommentCart does not control the privacy practices of independent third-party services.

9. Children's Privacy

CommentCart is intended for businesses and adults and is not directed to children under 13. We do not knowingly collect personal information from children under 13.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes to CommentCart, applicable laws, or third-party platform requirements. Updates will be posted on this page with a revised "Last updated" date.

11. Contact

If you have privacy questions, requests, or concerns, contact us at [email protected].