Privacy Policy

1. Who We Are

Bundleflow is a Shopify app that helps merchants create bundle and offer experiences, measure bundle performance, generate business documents such as invoices and related records, automate or send emails tied to those workflows, and manage app billing and plan access.

2. Information We Collect

We collect and process information that is necessary to operate, support, secure, and improve Bundleflow.

Merchant and Store Information

We may collect:

• Store identifiers such as shop domain, Shopify shop ID, locale, market, and store settings
• Merchant account and session information needed to authenticate the app and keep the embedded app working inside Shopify
• Billing-related information such as subscription plan, billing status, trial state, recurring charges, and approved discounts

Store and Commerce Data

We may collect or process:

• Product, variant, collection, tag, and market data needed to show bundle offers and storefront experiences
• Order, draft order, refund, and related transaction data needed for analytics, document generation, and automation workflows
• Discount and promotion data used to create or validate app-related offers and billing discounts

Customer-Related Data Processed for Merchant Workflows

When required for merchant-configured workflows, we may process:

• Customer names, email addresses, shipping or billing details, and order details
• Secure document-access tokens and related delivery metadata when a document is made available through a link or email flow

App Content and Configuration

We may collect or store:

• Bundle configurations, offer rules, targeting conditions, scheduling data, template settings, translations, and merchant customizations
• Email templates, email assets, document templates, numbering policies, and retention settings

Usage, Analytics, and Operational Data

We may collect:

• Bundle analytics, conversion events, added revenue records, currency normalization data, dispatch jobs, webhook receipts, and operational logs
• Error logs, audit records, and support metadata needed to diagnose issues, protect the app, and support merchants

3. How We Use Information

We use information to:

• Provide Bundleflow features, including bundle offers, storefront delivery, analytics, invoicing, document rendering, email automation, and merchant configuration
• Authenticate merchants, manage subscriptions, apply app billing discounts, and enforce plan limits or access entitlements
• Generate, deliver, and retain merchant-requested documents and emails
• Measure bundle performance, normalize analytics data across currencies, and provide reporting inside the app
• Secure the app, investigate abuse, prevent fraud, debug issues, and maintain service reliability
• Comply with legal obligations and Shopify platform requirements, including handling privacy and compliance requests

4. How We Share Information

We do not sell merchant or customer personal information. We may share information only as needed to operate Bundleflow and meet our obligations.

We may share information:

• With Shopify, to authenticate the app, read or write authorized store data, process app billing, and respond to platform-required webhooks and compliance events
• With infrastructure and service providers, where necessary to host the app, store files, send emails, process queued jobs, and operate analytics or document delivery systems
• With the merchant or the merchant’s customers, when Bundleflow generates documents, sends emails, or exposes a secure document link as part of a merchant-enabled workflow
• When required by law, or when reasonably necessary to protect Bundleflow, Shopify merchants, customers, or the public

5. Data Retention

We retain information for as long as needed to provide the app, maintain records, enforce billing and security controls, and comply with legal obligations.

• Some Bundleflow features allow configurable retention periods, for example for rendered documents, invoice files, email history, and related operational records
• When a merchant uninstalls the app, we perform a best-effort cleanup of merchant-scoped app data and related assets stored by Bundleflow
• We also respond to applicable Shopify compliance requests, including customer and shop privacy webhooks required by Shopify

6. Security

We use reasonable administrative, technical, and organizational measures to protect information processed by Bundleflow. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Merchant Responsibilities

Merchants are responsible for determining whether Bundleflow is appropriate for their store, configuring the app in a lawful manner, and providing any notices or obtaining any consents required for their use of customer data, documents, or emails.

8. International Processing

Bundleflow may process and store information in countries other than the merchant’s or customer’s country, depending on where our service providers and infrastructure operate.

9. Changes to This Policy

We may update this Privacy Policy from time to time. If we make a material change, we may update the date on this page and take additional steps when appropriate.

10. Contact

If you have questions about this Privacy Policy or Bundleflow’s privacy practices, contact:

bundleflowapp@gmail.com