Privacy

How Cartonoma uses your information.

Read how we use information from your messages, website checks and Cartonoma account, and how to request its deletion.

Sign in
In brief

Grafikit LLC uses the contact details you choose to send only to respond to your request. Readiness-test data follows its own minimization and deletion rules. Sending a message is not marketing permission.

While you browse

Cloudflare helps deliver and protect this site. It may process your IP address in its security systems and set the necessary __cf_bm security cookie to distinguish legitimate traffic from automated abuse. Cartonoma does not use that cookie for marketing or behavioral analytics.

When you send a message

Grafikit LLC receives your name, email, subject, message, and any website address you choose to include so we can respond. Do not send passwords, payment information, health information, or other sensitive data. We keep contact records only for as long as reasonably needed to answer and manage the request. This consent is not bundled with marketing permission.

When you run the readiness test

You can test publicly accessible online stores. We use Cloudflare Turnstile to verify human visitors and limit automated use. We remove the query and fragment from the address you enter, turn your IP address into a purpose-specific rate-limit fingerprint before it reaches the readiness database, and physically delete the anonymous scan and report within 24 hours. No shareable report link is created. If you request a PDF by email, we use the address you provide to send that report. This request does not subscribe you to marketing emails.

When you request a consultation

Your name, email, store address, and score are encrypted and used only to respond to this request. They are deleted within the configured consultation-record period, which can never exceed 90 days. Limited non-contact status information may remain in that record until the same deadline. Marketing permission is not bundled with this consent.

When you sign in

We use your verified email address to identify your Cartonoma account and send the sign-in links you request. Necessary cookies keep you signed in and protect account actions. Your account connects you to the workspaces and websites you are authorized to manage.

If you choose social sign-in

When a Google, X or Facebook sign-in option is available and you choose it, that provider authenticates you. After you confirm the connection to your Cartonoma account, we store the provider name and its unique account identifier so you can sign in again. We do not use social sign-in to read your mailbox, contacts or posts, or to publish on your behalf. Your provider also handles the sign-in under its own privacy policy.

If you connect Google Search Console

With your permission, Cartonoma reads the Search Console properties available to your Google account and the selected site’s search clicks, impressions, queries, pages, click-through rates and average positions. We use this information to show your site’s search performance to authorized members of your workspace. We store the selected property and encrypted Google access credentials so you can return without granting permission each time. Search performance responses are displayed on request and are not saved as an analytics history. We do not sell this Google data, use it for advertising, or send it to AI model providers. Disconnect Search Console in the site settings to revoke future access and remove the stored Google credentials. You can also remove access in your Google account. To request deletion of the saved property selection and connection records, email [email protected]. Our use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

Request account or social sign-in data deletion

Email [email protected] from the email address registered with your Cartonoma account, using the subject “Data deletion”. Tell us whether you want to remove a Google, X or Facebook connection or request deletion of your Cartonoma account. We may ask you to verify account ownership before acting. Removing a social connection prevents future sign-in through that connection; it does not delete your Google, X or Facebook account. Do not include passwords or sign-in links in your request.