BundleBoost privacy policy

Last updated: 2026-10-04

What the app does

BundleBoost shows quantity breaks, bundles and related offers on a Shopify store's product pages and applies the discounts at checkout.

Data we store

The store's domain and the access token Shopify issues at installation; the deals the merchant creates; anonymous widget statistics (views and add-to-cart events per day, counted with a random visitor ID that is stored only as a one-way, store-specific hash); and order summaries for analytics (order number, date, totals, purchased products and discounts). We do not store customer names, email addresses, phone numbers, addresses or payment details.

Visitor tracking and consent

The storefront widget does not create a visitor ID when the shopper has declined analytics in the store's cookie banner (Shopify Customer Privacy API); then only anonymous event counts are recorded.

How we use data

Only to run the app for the merchant: showing and applying deals, and the analytics inside the app. We do not sell data, share it with third parties for advertising, or use it to profile shoppers.

Retention and deletion

When the app is uninstalled, its sessions are removed and Shopify asks us to erase the store's data 48 hours later (shop/redact); we then delete all deals, statistics and order summaries. We keep only the store domain and the date its free trial started, so a reinstall does not start a new trial. Customer data requests and redactions are answered through Shopify's mandatory privacy webhooks.

Hosting and security

Data is kept on our application server and database. All traffic uses HTTPS, admin requests are verified with Shopify session tokens, and webhooks and storefront requests with Shopify signatures.

Questions about privacy: bundleboost1@gmail.com