Privacy policy

Last updated: 23 August 2026

What this app does not collect

This app collects no personal data about your customers. It does not store names, email addresses, phone numbers, addresses, payment details or order contents. The discount logic runs inside Shopify's own infrastructure and keeps nothing.

What is stored

• Your shop's domain and an access token. Needed so the app can rebuild the storefront bundle data when a discount changes. The token is erased the moment you uninstall; the domain is kept until Shopify sends the shop redaction request that follows an uninstall, and is then deleted with everything else.
• Scan statistics. When you run a discount audit, we record counts only: how many discounts were checked, how many overlaps were found and of what kind, whether the shop is on Shopify Plus, which bundle apps were detected, and — on the paid plan — how many of your recent orders showed a split line. No discount names, product names, order numbers or customer details are ever recorded.
• A one-way code standing for your shop. Those statistics are labelled with a keyed hash of your shop domain so that repeated scans from one shop count once. It cannot be reversed into your domain, and we use it for nothing except grouping. It is what lets us delete your statistics on request.
• Whether you started or ended a paid subscription, with the same one-way code and no payment details. Shopify handles all billing; we never see a card.

Your bundle rules are stored in your own Shopify metafields, not on our servers.

Data requests and deletion

The app implements Shopify's mandatory privacy webhooks (customers/data_request, customers/redact, shop/redact). Because no customer data is held, a data request returns an empty record set and a customer redaction has nothing to erase. A shop redaction deletes your domain, your access token, and every scan statistic carrying your shop's one-way code.

Third parties

Data is processed on Cloudflare Workers and stored in Cloudflare D1, which is this app's only sub-processor. Nothing is sold, shared with advertisers, or used for any purpose other than operating the app.

Our agreement with you

Installing Bundle Watch means accepting this policy, and it is the privacy and data protection agreement between us. It applies for as long as the app is installed on your store.

• You are the controller of your customers' personal data; we are a processor acting for you. We process it only to give you the results described above, and only when you ask — a scan runs when you press the button, never on a schedule of ours.
• We will not use your data for anything else. Not for profiling, advertising, resale, model training, or comparison against any other merchant's store.
• We use one sub-processor, Cloudflare, named above. We will not add another without updating this page.
• You can have everything erased. Uninstalling erases the access token immediately, and Shopify's shop redaction request then removes your domain and your scan statistics. You can also ask us directly, at the address below, and we will confirm when it is done.
• If we ever have a breach affecting your data, we will tell you, at the email Shopify has on file for your store.

Contact

shihchieh0114@gmail.com