SmartBundle privacy policy

Last updated 31 October 2026

SmartBundle (“the app”) lets Shopify merchants create product bundles, volume discounts, buy X get Y offers, free gifts, mix & match bundles, add-ons and frequently-bought-together offers. This policy explains what the app collects when a merchant installs it and how that information is used.

Information we collect

• Store information: the shop’s domain, name, currency and time zone, and the access token Shopify issues to the app (stored encrypted).
• Product catalog: products, variants, prices, images, inventory availability and collections, so bundles can be shown and discounted correctly.
• Bundle settings: the bundles, discounts and design settings the merchant creates in the app.
• Plan status: which SmartBundle plan the store is on, confirmed with Shopify.
• Bundle sales: when an order is placed, the app reads it only to add up what was paid for items bought through SmartBundle bundles, because plans include a monthly bundle-sales limit. It keeps the order number, that amount and its currency; nothing else from the order.

The app does not store shoppers’ names, email addresses, phone numbers, addresses or payment details, and does not request access to customer records. On the storefront, the bundle widgets read the shopper’s cart from Shopify in their browser to add bundles and free gifts; cart contents are not stored by the app.

How we use it

Only to provide the app: showing bundles on the merchant’s store, applying the matching discounts at checkout through a Shopify discount, and showing the merchant their bundles and settings. We do not sell or rent this information and do not use it for advertising.

Sharing

Information is processed by Shopify and by the hosting and database providers that run the app (under their data-processing terms). It is not shared with anyone else unless required by law.

Retention and deletion

When a merchant uninstalls the app, Shopify notifies us and the store’s data is deleted within 48 hours of Shopify’s shop/redact request. Customer data requests and redaction requests sent by Shopify are answered as required; the app holds no customer data for them.

Security

Access tokens are encrypted at rest, every request is verified with Shopify’s signatures, and each store can only access its own data.

Contact

For questions about this policy or your data, contact us through the support email on SmartBundle’s Shopify App Store listing.