Privacy policy

1. Who we are

Rapid Cart (rapidcart.co) is operated by BAP Software Ltd, the data controller for the personal data described here. Contact: info@rapidcart.co.

2. Data we collect

Sellers (registered users):

• Name and email address (from registration or Google sign-in)
• Password, stored only as a cryptographic hash
• Profile data you provide: handle, display name, welcome text
• Whether you asked for occasional tips beyond the service emails

Buyers (visitors placing order requests):

• Name and email address
• Phone number and delivery address, if you choose to provide them
• The content of your order request (item, price offer, wishes)

Guide requests (visitors asking for a free guide):

• Email address, and whether you asked for tips beyond the guide
• Which link brought you to the page (for example “instagram”), and whether the guide was opened

Free tools (visitors pasting a customer conversation):

• The text you paste is sent to Anthropic, our AI processing provider, to produce the summary. Anthropic processes it on our behalf and does not use it to train models. We keep only what shape the request took (its length, whether it succeeded), never the text itself — unless you choose to save the result.
• If you save a result, we keep the conversation, the summary and your email address so the link we send you keeps working, and whether you asked for tips beyond that email.

Technical data: our hosting provider keeps standard server logs (IP address, browser type) for security and abuse prevention. When an account is created we also store a one-way hash of the network address it came from — never the address itself — so we can limit how many accounts one connection creates. These hashes are deleted after 30 days. The only advertising tracker on the site is Reddit's pixel, and it runs only if you accept cookies (see section 4). We do no profiling of our own.

3. Why we process it

• To provide the service — deliver order requests from buyers to the seller they chose (performance of a contract)
• To send transactional emails: order confirmations to buyers and notifications to sellers (performance of a contract)
• To send a guide or a tool result you asked for (performance of a contract)
• To send occasional tips on selling online — only if you ticked the box for them, on any of our forms or in your account settings. One answer covers every email address you gave us it under (consent, withdrawable through the link in every such email or in your settings)
• To see which of our links and ads bring people here, including through Reddit's pixel — only if you accept cookies (consent, withdrawable at any time on the cookie policy page)
• To keep the service secure — rate limiting, spam prevention (legitimate interest)
• To comply with legal obligations where applicable

4. Who we share it with

When you submit an order request, your details go to the seller whose page you used — the seller then processes them independently to fulfil your request. Beyond that we share data only with the processors that run the service: Vercel (hosting), Neon (database), our email delivery provider, and — for the free tools only — Anthropic, which processes pasted text to produce a summary. We never sell personal data.

When you pay a seller by card from your order page, your name, email address and the amount go to Stripe, which processes the payment under the seller's own Stripe account. When a seller offers their own payment link instead, that link opens the seller's chosen service, which has its own privacy terms.

If you reached us by clicking an advertisement and then create an account or ask for one of our free guides, we tell that advertising platform that the click it sent us led to a signup or a download. We send only the click identifier the platform generated itself — never your name, email address or anything else about you — and we do so from our server, whether or not you accepted cookies.

If you accept cookies, our pages also load Reddit's pixel. Reddit then receives the pages you visit here, whether you signed up or downloaded a guide, and your browser's usual details such as its IP address, and it may connect these to a Reddit account you are signed in to. We use it to see whether our ads on Reddit work. We do not give Reddit your name or email address. Reddit processes this data under its own privacy policy. The pixel never runs on sellers' order pages, so buyers placing an order are not tracked by it. You can withdraw your consent at any time on the cookie policy page.

5. International transfers

Our processors, and Reddit for the pixel described above, may process data in the EU and the United States under appropriate safeguards such as EU Standard Contractual Clauses or the EU–US Data Privacy Framework.

6. Retention

Seller account data is kept until the account is deleted. Order data is kept while the receiving seller's account exists, so both sides can refer back to it. Guide requests are kept so the download link keeps working and so we can tell which guides are useful. You can request deletion at any time (see below).

When a seller deletes their account, their own data — name, email address, password, any linked Apple or Google sign-in, their images and every signed-in device — is removed immediately, and their order page stops taking orders and no longer appears online. The orders they had already received are kept for 90 days afterwards, because each buyer was emailed a link that shows their own order and those links would otherwise break while people were still waiting on something. After 90 days those orders and their messages are deleted permanently.

7. Your rights

Under the GDPR (and similar laws), you can request access to, correction of, or deletion of your personal data; restriction of or objection to processing; and a portable copy of data you provided. You can also complain to your local data protection authority. To exercise any right, email info@rapidcart.co.

8. Cookies

Essential cookies keep you signed in and are always on. Measurement cookies and Reddit's pixel run only if you accept them. See the cookie policy for every cookie we set and to change your choice.

9. Changes

If we change this policy, we'll update this page and the effective date. Significant changes will be announced to registered users by email.