Privacy Policy

1. Who We Are

Bundleflow is a Shopify app that helps merchants create bundle and offer experiences, measure bundle performance, generate business documents such as invoices and related records, automate or send emails tied to those workflows, and manage app billing and plan access.

2. Information We Collect

We collect and process information necessary to operate, support, secure, and improve Bundleflow.

Merchant and store information

• Shop domain, Shopify shop ID, locale, market, and store settings
• Merchant account and session information required to authenticate and operate the app
• Billing information such as subscription plan, billing status, trial state, recurring charges, and approved discounts

Store and commerce data

• Product, variant, collection, tag, and market data needed for bundle offers and storefront experiences
• Order, draft order, refund, and related transaction data needed for analytics, document generation, and automation workflows
• Discount and promotion data used to create or validate app-related offers and billing discounts

Customer-related data processed for merchant workflows

• Customer names, email addresses, shipping or billing details, phone numbers, and order details when required for merchant-configured workflows
• Secure document-access tokens and related delivery metadata when a document is made available through a link or email flow

App content and configuration

• Bundle configurations, targeting conditions, scheduling data, template settings, translations, and merchant customizations
• Email templates, email assets, document templates, numbering policies, and retention settings

Usage, analytics, and operational data

• Bundle analytics, conversion events, added revenue records, currency normalization data, dispatch jobs, webhook receipts, and operational logs
• Error logs, audit records, and support metadata needed to diagnose issues, protect the app, and support merchants

3. How We Use Information

We use information to:

• Provide Bundleflow features, including bundle offers, storefront delivery, analytics, invoicing, document rendering, email automation, and merchant configuration
• Authenticate merchants, manage subscriptions, apply app billing discounts, and enforce plan limits or access entitlements
• Generate, deliver, and retain merchant-requested documents and emails
• Measure bundle performance and provide reporting inside the app
• Secure the app, investigate abuse, prevent fraud, debug issues, and maintain service reliability
• Comply with legal obligations and Shopify platform requirements, including handling privacy and compliance requests

4. Merchant Data Processing

When Bundleflow processes personal data on behalf of a merchant in connection with orders, customer communications, documents, analytics, or app workflows, Bundleflow acts as a service provider or processor for the purpose of providing the app's services to that merchant. The merchant remains responsible for determining whether Bundleflow is appropriate for its business, providing required notices, obtaining any required consents, and ensuring it has the right to instruct Bundleflow to process the relevant data. Bundleflow processes such data only as necessary to provide the app, maintain and secure the service, comply with legal obligations, and enforce its terms.

5. How We Share Information

We do not sell merchant or customer personal information. We may share information only as needed to operate Bundleflow and meet our obligations.

We may share information:

• With Shopify, to authenticate the app, read or write authorized store data, process app billing, and respond to required platform webhooks and compliance events
• With infrastructure and service providers, where necessary to host the app, store files, send emails, process queued jobs, and operate analytics or document delivery systems
• With the merchant or the merchant's customers, when Bundleflow generates documents, sends emails, or exposes a secure document link as part of a merchant-enabled workflow
• When required by law, or when reasonably necessary to protect Bundleflow, merchants, customers, or the public

6. Data Retention

We retain information for as long as needed to provide the app, maintain records, enforce billing and security controls, and comply with legal obligations.

• Some Bundleflow features allow configurable retention periods, including for rendered documents, invoice files, email history, and related operational records
• When a merchant uninstalls the app, we perform a best-effort cleanup of merchant-scoped app data and related assets stored by Bundleflow
• We also respond to applicable Shopify compliance requests, including customer and shop privacy webhooks required by Shopify

7. Security

We use reasonable administrative, technical, and organizational measures to protect information processed by Bundleflow. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. International Processing

Bundleflow may process and store information in countries other than the merchant's or customer's country, depending on where service providers and infrastructure operate.

9. Changes to This Policy

We may update this Privacy Policy from time to time. If we make a material change, we may update the date on this page and take additional steps when appropriate.

10. Contact

If you have questions about this Privacy Policy or Bundleflow's privacy practices, contact:

bundleflowapp@gmail.com