Upsell & Cross-sell Bundle Builder
Features How it works Pricing FAQ Add to Shopify
Legal

Privacy Policy — Bundle Builder

Last updated: 11 July 2026 · Applies to the Upzella: Bundle Builder Shopify app

Upzella: Bundle Builder (“the app,” “we,” “us”) helps Shopify merchants offer customer-built product bundles with tiered discounts. This policy explains what data the app handles when it is installed on a Shopify store.

Contents
  1. Information we collect
  2. How we use information
  3. Data sharing
  4. Data retention and deletion
  5. Data storage and security
  6. Changes to this policy
  7. Contact

1. Information we collect

When a merchant installs the app, we store:

  • The store’s myshopify.com domain and a Shopify API access token, which are required for the app to function.
  • Bundle configurations the merchant creates: titles, selected product references, discount tiers, labels, and display settings.

We do not collect, store, or process any customer personal information. Shoppers’ carts and checkouts are handled entirely by Shopify. The app’s storefront widget does not send any data to our servers.

2. How we use information

Store data is used solely to provide the app’s functionality: displaying the merchant’s bundle page and creating the automatic discounts that the merchant configures. We do not sell, rent, or share data with third parties, and we do not use it for advertising.

3. Data sharing

We do not share merchant data with any third party except as required to operate the app’s own infrastructure (secure database and application hosting) or as required by law. We do not transfer data to advertisers, data brokers, or unrelated services.

4. Data retention and deletion

When the app is uninstalled, all stored data for that store — bundle configurations, sessions, and access tokens — is deleted automatically. We also honor Shopify’s mandatory data-protection (GDPR) webhooks:

  • shop/redact: removes all remaining data we hold for the store.
  • customers/data_request and customers/redact: because we hold no customer data, these requests have nothing to return or remove.

5. Data storage and security

Data is stored in a managed PostgreSQL database. All traffic between your browser, Shopify, and our servers is encrypted in transit using TLS/HTTPS.

6. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the “Last updated” date above.

7. Contact

Questions about this policy or your data? Email upzella.app@gmail.com.