Privacy Notice

Last updated: 16 June 2026

This notice explains what data the KaliCart Bridge plugin sends to KaliCart Global when a merchant chooses to join the federated network, and what KaliCart Global does with it. It applies only to the optional “Activate Federated Catalog” feature. With that feature off, the plugin sends nothing to KaliCart Global.

What is sent, and when

Nothing is sent automatically. Data leaves your server only when an administrator explicitly clicks “Activate Federated Catalog” in WP Admin → KaliCart → Settings, and only if the Global indexing consent box is ticked.

On that click, the plugin sends a single piece of data to https://dashboard.kalicart.com: your site’s public URL (for example https://yourstore.com). Nothing else is transmitted at activation time.

What KaliCart Global does with it

The URL tells KaliCart Global that your store exists and wishes to be discovered. From then on, KaliCart Global periodically reads your public catalog — the same product data already exposed to any agent through the Bridge’s public REST endpoints — and includes it in federated agent search. KaliCart Global only ever reads; it never writes to your store.

What is never sent

• No customer data of any kind.
• No orders, carts, or transaction data.
• No personal data, accounts, or credentials.
• No API keys or secrets.

KaliCart Global only ever sees what is already public on your storefront.

Consent, control, and revocation

Inclusion in federated search is governed by the allow_global_indexing consent flag, published in your site’s public discovery document. You remain in control at all times:

• Untick the consent box, or click “Revoke consent”, and the plugin marks your catalog as withdrawn.
• On revocation the plugin notifies KaliCart Global, which immediately stops serving your catalog in federated search (“parks” it). It is not served while consent is withdrawn.
• Re-ticking consent restores your listing at the next discovery check.

Data retention

While consent is active, KaliCart Global keeps a normalized copy of your public catalog to serve federated search and refreshes it periodically. When consent is withdrawn, the catalog is parked and no longer served. Parked catalog data is retained so that your listing can be restored if you re-activate, and until you request its deletion. To have your parked data removed, contact us at the address below.

Contact

For any request relating to your data — including deletion of parked catalog data — contact privacy@kalicart.com.