Bypass the Spam folder.
Resurrect your abandoned carts
in the real world.

1. Purpose and nature of the service

Les présentes General Terms and Conditions of Sale and Use (les « CGV/CGU ») régissent l'utilisation de la solution logicielle PostCart (le « Service »), éditée par CROKSEO SASU (ci-après « PostCart »).

The Service is intended exclusively for professionals acting in the course of their business (the “Merchants” or “Clients”).

PostCart enables the Merchant to automate the sending of personalized physical postcards. The Service integrates with CRM tools and e-commerce platforms via API or compatible connectors (Shopify, Magento, PrestaShop, etc.).

PostCart acts exclusively as a technical service provider and data processor for processing carried out on behalf of the Merchant. The Service operates exclusively through physical postal mail.

2. Registration, access to the Service and connection to the Merchant's tools

To use the Service, the Merchant must create an account and connect their e-commerce or CRM environment via the interfaces and APIs made available by PostCart.

The Merchant undertakes to provide accurate and up-to-date information. They are solely responsible for the confidentiality of their credentials, the access granted to their employees and the configuration of the Service.

3. Configuration, triggering and execution of mailings

Mailings are generated automatically based on the rules, triggers and parameters defined by the Merchant. Mailings can be triggered following an abandoned cart or as part of an event-based postal campaign.

The Merchant remains solely responsible for the choice of campaign purposes, segmentation criteria, message content and verifying the lawfulness of each campaign.

Once the production or printing process has started, a mailing can no longer be cancelled.

4. Financial terms, subscriptions and credits

The Service operates on a paid subscription model. Depending on the subscribed plan, the subscription may include a monthly volume of postcards or sending credits. Unless otherwise stipulated, 1 postcard equals 1 credit.

Credits included in the subscription are reset according to the periodicity specified in the subscribed plan. Invoices are payable according to the conditions agreed at the time of subscription.

As the Service is concluded exclusively between professionals, no right of withdrawal applies. No cancellation or refund will be accepted once the printing process has started.

5. Merchant responsibility for content and legal compliance

The Merchant is the sole economic and legal sender of mail addressed to Recipients. They are solely responsible for the compliance of card content, the lawfulness of campaigns, the quality of imported data and compliance with applicable regulations.

PostCart provides compliance features: opt-out notices on postal materials, a QR code unsubscribe mechanism, and technical management of an opt-out list.

6. Personal data, roles of the parties and data processing

For processing related to the execution of campaigns, the Merchant acts as Data Controller and PostCart as Data Processor.

PostCart undertakes to process data only on documented instructions from the Merchant, to ensure their confidentiality, to implement appropriate security measures, and not to sell or reuse data for its own account.

A Data Processing Agreement (DPA) is annexed to these T&Cs and forms an integral part thereof.

7. Right to object and unsubscribe management

When this feature is enabled, each postcard may include an opt-out notice and a QR code allowing the Recipient to exercise this right. PostCart records this objection and blocks subsequent mailings within the defined scope.

8. Limitation of liability

PostCart is bound by a general obligation of means. Its total liability is strictly limited to the amount excluding VAT actually paid by the Merchant during the three (3) months preceding the event giving rise to the dispute, except in cases of gross negligence or fraud.

9. Suspension and termination

Either party may terminate the contract under the conditions set out in the applicable offer. PostCart reserves the right to suspend access to the Service in case of non-payment, non-compliant use, regulatory violation or risk to the security of the Service.

10. Intellectual property

The Service, its software, interfaces, graphic elements, trademarks and content are protected by intellectual property rights and remain the exclusive property of PostCart or its licensors. PostCart grants the Merchant a non-exclusive, personal and non-transferable right of use for the duration of the contract.

11. Commercial reference

Unless expressly objected to, the Client authorises PostCart to use its company name, trademark and logo as a commercial reference, for the duration of the contract or for 5 years from its end.

12. Confidentiality

Each party undertakes to keep confidential the other party's information to which it may have access in the context of the contract. This obligation remains in force for 3 years after the end of the contractual relationship.

13. Modification of the Service and T&Cs

PostCart reserves the right to develop the Service and these T&Cs. Any substantial modification may be notified to the Merchant by any appropriate means. Continued use of the Service constitutes acceptance of the new conditions.

14. Applicable law and jurisdiction

These T&Cs are governed by French law. In the event of a dispute, exclusive jurisdiction is expressly granted to the Commercial Court of Strasbourg.

Last updated: 23/04/2026

This privacy policy explains how CROKSEO SASU, publisher of the PostCart solution, processes personal data in the context of operating the site, managing Merchant accounts and providing the service.

1. Who are we?

CROKSEO SASU
1A rue des tonneliers, 67300 SCHILTIGHEIM
SIRET 83494004100017 – RCS de Strasbourg
Email: contact form – Phone: 07.830.880.03

2. Scope

This policy applies to visitors of the PostCart site, professional users with a PostCart account, and individuals affected by processing carried out via PostCart as part of postal campaigns configured by a Merchant.

Depending on the situation, PostCart may act either as data controller or as data processor.

3. When is PostCart the data controller?

PostCart acts as data controller for its own purposes: managing contact requests, creating and administering Merchant accounts, contract management and invoicing, customer support, site and infrastructure security, service improvement.

4. When does PostCart act as data processor?

When a Merchant uses PostCart to configure and execute postal campaigns, the Merchant acts as data controller and PostCart as data processor, in particular for: recovering abandoned carts by postal mail, commercial postal campaigns, managing QR codes and unsubscribes.

5. What data do we collect?

5.1 As data controller

• Identification data: surname, first name, role, company
• Contact data: professional email, phone, professional postal address
• Account data: username, encrypted password, roles, preferences
• Contractual and billing data: subscribed plan, history, invoices
• Support data: content of requests, support exchanges
• Technical data: IP address, application logs, security events

5.2 On behalf of Merchants

• Recipient's surname, first name and postal address
• Data relating to an abandoned cart and its value, where applicable
• Segmentation data strictly necessary for the campaign
• Secure tokens, technical events related to QR code scans
• Data necessary for managing the right to object

6. Purposes and legal bases

6.1 When PostCart is data controller

6.2 When PostCart is data processor

Processing carried out for sending commercial postcards is based on the legal basis determined by the Merchant, under their responsibility.

7. Mandatory or optional nature of data

Fields identified as mandatory are necessary to process your request, create your account or provide the service. If you do not provide this data, we may not be able to provide all or part of the service.

8. Who receives your data?

Your data is accessible to authorised persons within PostCart as well as to our subcontractors or service providers: hosting and infrastructure, authentication and security, billing, customer support, printing and postal routing, integration with e-commerce or CRM platforms.

9. Transfers outside the European Union

Data is hosted and processed within the European Union or the European Economic Area. Certain providers may be located outside the EU; in such cases, we frame these transfers using appropriate safeguards, in particular standard contractual clauses.

10. Retention periods

• Merchant account: for the entire duration of the contractual relationship, then limited archiving if necessary
• Billing data: applicable legal retention period (10 years)
• Abandoned carts: maximum 30 days
• Event-based postal campaigns: no later than 30 days after the end of the campaign
• Opt-out list: kept for a minimum of 3 years to ensure compliance with the right to object

11. How do we protect your data?

We implement appropriate technical and organisational measures: access controls, authorisation management, data flow encryption, logging, token security, backups, infrastructure monitoring and internal incident management procedures.

12. Your rights

In accordance with applicable regulations, you have the following rights: right of access, rectification, erasure, restriction of processing, and to object.

In the context of commercial prospecting, the right to object must be exercisable simply and free of charge.

Merchant users or visitors: exercise your rights with PostCart — CROKSEO, 1A rue de tonneliers, 67300 SCHILTIGHEIM.

End customers of a Merchant: contact the relevant Merchant first, as data controller. You may also use the link or QR code printed on the material you received.

13. Complaint to the supervisory authority

If you believe your rights are not being respected, you may lodge a complaint with the CNIL (cnil.fr) or any other competent supervisory authority in your country.

14. Cookies and trackers

The PostCart site and application may use cookies or other technical trackers necessary for their operation. Non-strictly-necessary trackers are subject to specific information and, where required, consent collection.

15. Amendment of this policy

We may amend this policy to reflect legal, regulatory or technical developments. The date of the last update appears at the top of the document.

Crokseo participates in and complies with all Specifications and Policies of the IAB Europe Transparency & Consent Framework. It uses Consent Management Platform n°92.

You can change your choices at any time by clicking here.