Privacy Policy

1. Introduction

BundleBoom ("we", "us", or "our") operates as a Shopify app that helps merchants create and manage product bundles. This Privacy Policy explains how we collect, use, and protect your information when you use our service.

2. Information We Collect

When you install and use BundleBoom, we collect the following information:

• Shop Information: Your Shopify shop domain, shop name, and contact email
• Product Data: Product titles, prices, variants, inventory levels, and images needed to create bundles
• Bundle Configuration: Bundle settings, discount rules, and component products you select
• Access Credentials: Shopify API access tokens (encrypted and stored securely)
• Usage Analytics: App interactions and feature usage (via PostHog analytics)

3. How We Use Your Information

We use your information to:

• Provide and maintain the BundleBoom service
• Create and manage product bundles in your Shopify store
• Sync inventory levels and automatically pause/resume bundles
• Process billing and manage subscriptions (via Lemon Squeezy)
• Improve our service through analytics and error monitoring
• Send important service updates and support communications

4. Data Storage and Security

Your data is stored securely using:

• Firebase (Google Cloud): All shop and bundle data is stored in Firestore with encryption at rest
• Access Controls: API tokens are encrypted and access is restricted to authorized operations only
• SSL/TLS: All data transmission uses HTTPS encryption

We implement industry-standard security measures to protect your data from unauthorized access, disclosure, or destruction.

5. Third-Party Services

We use the following third-party services:

• Shopify: To access your store data and create bundles
• Firebase (Google): For data storage and authentication
• Lemon Squeezy: For payment processing and subscription management
• PostHog: For privacy-focused analytics
• Sentry: For error monitoring and debugging

Each service has its own privacy policy governing how they handle data.

6. Data Retention

We retain your data as long as your account is active. When you uninstall BundleBoom, we automatically delete:

• Shop configuration data
• Bundle configurations and history
• Cached product information

Billing records may be retained for legal and accounting purposes as required by law.

7. Your Rights (GDPR)

If you are in the European Economic Area (EEA), you have the right to:

• Access: Request a copy of your data
• Rectification: Correct inaccurate data
• Deletion: Request deletion of your data (uninstalling the app automatically deletes most data)
• Portability: Export your data in a machine-readable format
• Objection: Object to processing of your data

To exercise these rights, contact us at the email address below.

8. Cookies and Tracking

We use essential cookies for authentication and session management. Analytics cookies (PostHog) help us understand how merchants use BundleBoom to improve the service. You can disable analytics cookies in your browser settings.

9. Children's Privacy

BundleBoom is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the app. Your continued use of BundleBoom after changes indicates acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or want to exercise your data rights, contact us:

• Email: privacy@bundleboom.app
• Support: bundleboom.app/support