Who this covers
This policy explains how the Bundleloom Shopify app handles data about the businesses that install it ("merchants") and the people who shop at those stores ("customers"). This website (bundleloom.com) uses no cookies, ad trackers or analytics.
For customer data the merchant is the controller; Bundleloom acts as a processor on the merchant's behalf and only on their instructions.
Shopify access scopes
Bundleloom asks for these scopes only, each for the reason listed.
| Scope | Why |
|---|---|
read_products | So you can choose products, variants, prices and images when building a bundle. |
read_discounts | Read the status of the automatic discounts we create. |
write_discounts | Create, update and switch off bundle discounts as Shopify automatic discounts. |
What we store
| Data | Purpose | Source |
|---|---|---|
| Store session | Store domain and access token so the app can talk to Shopify. | Installation |
| Bundles | Bundle name, chosen products, bar and style settings, and the IDs of the Shopify discounts we created. | Admin screen |
| Statistics | Daily view, selection and add-to-cart counts per bar. Only totals are kept. | Storefront, via Shopify app proxy |
For statistics we store no visitor ID, IP address or cookie; only totals such as "how many times this bar was picked today". Bundleloom stores no shopper personal data. Add to cart goes straight to Shopify's cart.
Webhooks
We receive these notifications from Shopify. Each one is verified with Shopify's HMAC signature; anything that fails verification is rejected.
app/uninstalled: to delete the store's session and access token.app/scopes_update: to record scope changes.customers/data_request, customers/redact, shop/redact: see the GDPR section below.
GDPR and privacy requests
We handle Shopify's mandatory compliance webhooks as follows:
customers/data_request: Bundleloom stores no shopper data, so there is nothing to hand over; we answer the request saying so.customers/redact: There is no shopper data to delete; the request is logged.shop/redact: The store's bundles, statistics and session are deleted.
If you are a shopper, send your request to the store you bought from; the store passes it to us through Shopify. Merchants can email destek@bundleloom.com; we complete requests within 30 days.
Retention and deletion
When the app is uninstalled (app/uninstalled) the store's access token is deleted immediately and Bundleloom stops calling Shopify for that store. Shopify sends shop/redact 48 hours later; at that point every remaining record for the store is deleted from our database. Automatic discounts created by the app live on Shopify's Discounts page; we recommend switching your bundles off before uninstalling.
Want it gone sooner? Email destek@bundleloom.com from your store's address.
Sharing and sub-processors
We never sell or rent data or use it for advertising. Data lives only on the server that runs the app. It is not shared with third parties unless the law requires it.
Security
All traffic is encrypted over HTTPS. Shopify access tokens stay on the server and are never sent to the browser. The admin screen is reachable only through the store's Shopify admin session.
Contact and changes
Questions: destek@bundleloom.com. If we change this policy we publish the new version here and announce significant changes to installed stores inside the app.