Privacy Policy

Introduction

Bundlix ("Bundlix," "we," "us," or "our") is a third-party application built for the Shopify platform that helps merchants create product bundles, discounts, upsells, and related storefront experiences. This Privacy Policy explains what information Bundlix receives when a merchant installs and uses the app, why we process that information, and the choices available to merchants and their customers. This policy applies to the Bundlix app and the storefront components it adds to a merchant's store.

Information Bundlix Receives

Bundlix is installed by a merchant on their own Shopify store and operates on data that already exists within that store, or that the merchant creates while configuring the app. We do not ask store visitors or customers to create separate Bundlix accounts.

Shopify Merchant/Store Information

When a merchant installs Bundlix, we receive basic store information from Shopify, such as the store's .myshopify.com domain, the app's current plan tier, and subscription/billing status. This information is used to identify the store within Bundlix and to determine which features are available to it.

Product/Variant/Collection Information

Bundlix reads product, variant, and collection information from the merchant's own Shopify catalog through the Shopify Admin API — for example, product and variant IDs, titles, images, and prices — so the merchant can select items to include in bundles, discounts, and upsell offers.

Order and Order-Item Information

To attribute revenue to the correct bundle or offer, and to power analytics and recommendations, Bundlix reads order and order-line-item information from completed Shopify orders — including line items, quantities, prices, and discount-line tags. This transactional data already exists in the merchant's Shopify store; Bundlix reads it in order to connect a sale back to the offer that produced it, rather than originating any new order data itself.

App Configuration and Offer Data

We store the configuration a merchant creates inside Bundlix, such as bundle types, discount rules, quantity tiers, buy-one-get-one (BOGO) rules, free-gift rules, widget appearance and colors, any custom CSS or HTML the merchant writes, and enabled languages or translation text the merchant enters.

Usage/Analytics Information

Storefront widget views, clicks, add-to-cart events, and conversions are tracked using a first-party visitor identifier set by Bundlix's own storefront script (not a third-party tracker), so that performance can be measured and attributed per offer. Based on our review of the app's code, Bundlix does not use third-party analytics or advertising pixel scripts; the storefront script's only outbound calls are to Bundlix's own backend.

Purpose of Processing

Providing Bundle/Upsell Functionality

We use catalog, order, and configuration data to build, display, and operate the bundles, discounts, and upsell experiences a merchant configures.

Analytics and Attribution

We use widget interaction events and order data together to report on how offers are performing (views, clicks, add-to-cart events, and conversions) and to attribute revenue to the correct bundle or offer.

Product Recommendations

We analyze a merchant's own catalog and order history to suggest product pairings and bundle opportunities relevant to that store.

AI-Assisted Features

Certain plan tiers include AI-assisted features (such as Smart Recommendations, AI Recommendations, AI Bundle Copy, and Recommendation Scoring) that analyze a merchant's own catalog and order history to suggest bundle pairings and to draft bundle titles and descriptions for the merchant to review. To generate these suggestions, relevant catalog and order-history inputs may be sent to a third-party AI service provider we use for this purpose (see "Service Providers and Subprocessors" below). Suggestions produced by these features are proposals only — nothing is published to a merchant's store without the merchant's own review and action.

Troubleshooting and Security

We use technical and usage information to diagnose issues, maintain the reliability of the app, and protect against misuse, fraud, or security threats.

Service Providers and Subprocessors

Bundlix relies on a limited number of service providers to operate:

• Shopify — Bundlix operates on top of the Shopify platform and uses the Shopify Admin API and app infrastructure to function.
• Anthropic — AI-assisted features described above are powered by Anthropic's Claude API. Relevant catalog and order-history inputs needed to generate a suggestion are sent to Anthropic for processing on our behalf.
• Infrastructure and hosting providers — Bundlix uses infrastructure and database hosting providers necessary to run the app and store the data described in this policy securely.

These providers process data only as necessary to provide their respective services to Bundlix and are not permitted to use merchant or store data for their own independent purposes.

Data Sharing

Bundlix does not sell merchant or customer data. We do not share the information described in this policy with third parties except: with the service providers described above, as necessary to operate the app; where required to comply with applicable law, legal process, or a valid governmental request; or with a merchant's own consent.

Data Retention

We retain data for as long as it is operationally necessary to provide Bundlix's functionality to an active store, and as needed to meet legal, security, or Shopify-platform requirements. We do not use fixed, universal retention periods for all data types; retention depends on the nature of the data and the purpose it serves. Data associated with a merchant's shop is deleted or anonymized following app uninstallation, consistent with Shopify's own app requirements and applicable law, as described below.

Data Deletion

Bundlix implements Shopify's mandatory privacy/compliance webhooks (customers/data_request, customers/redact, and shop/redact). Based on our review of the app's code, Bundlix does not store customer-identifying information (such as a customer's name, email address, or phone number) in its own database — order-related data is keyed to Shopify's own order ID only. As a result, requests concerning a specific customer typically result in confirmation that no such customer-identifying data is held. When a shop-level erasure request is received, the shop's stored data — including products, orders, bundles, upsell configuration, analytics, and settings — is deleted from Bundlix's systems.

App Uninstallation

Uninstalling Bundlix stops any further data collection from that store. Data associated with the shop is deleted or anonymized following Shopify's own compliance webhook schedule for app uninstallation, in line with Shopify's app requirements and applicable law.

Shopify Privacy and Compliance Requests

As a Shopify app, Bundlix supports Shopify's mandatory data-protection framework for apps, including the compliance webhooks referenced above. Merchants and their customers can also direct privacy-related requests about a store's use of Shopify to Shopify directly, in addition to contacting Bundlix using the details in the "Contact" section below.

Data Security

We use reasonable administrative, technical, and organizational measures designed to protect the information described in this policy against unauthorized access, use, or disclosure. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.

International Processing

Bundlix and the service providers described above may process and store data in countries other than the merchant's own, using infrastructure operated by those providers. Where this occurs, we expect appropriate safeguards to be in place consistent with applicable data protection law.

Merchant and Customer Privacy Rights

Depending on applicable law, merchants and their customers may have rights regarding personal data, such as the right to request access to, correction of, or deletion of certain data. For most data handled by Bundlix, the merchant operating the store is the party best positioned to respond to their own customers' requests, since Bundlix acts as a service provider to the merchant. Requests can be directed to us using the contact details below, and we will respond consistent with applicable law and the technical realities described in this policy (including that Bundlix generally does not store customer-identifying information).

Children's Privacy

Bundlix is a business application intended for use by Shopify merchants and is not directed at, or knowingly used to collect information from, children.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will update the "Effective date" at the top of this page when changes are made. Continued use of Bundlix after an update constitutes acceptance of the revised policy.

Contact

If you have questions about this Privacy Policy or how Bundlix handles data, please contact us at ashish.kumar1381@gmail.com.