BundlePlus

Privacy Policy

Last updated: May 26, 2026

This Privacy Policy describes how Developer Console ("we", "us") collects, uses, and protects data when you use the BundlePlus Shopify app.

1. Data we collect from merchants

  • Shop domain (e.g. example.myshopify.com)
  • Bundle definitions you create (titles, products, prices)
  • Volume discount rules (tiers, eligibility, schedules)
  • Theme block placement state (which blocks you have added)
  • App settings and onboarding progress
  • Shopify access tokens needed to operate the app

2. Data we collect from your customers

To enforce per-customer usage limits on volume discounts, we store the Shopify customer ID and the number of times that customer has redeemed a discount. We do not collect customer names, emails, addresses, payment information, IP addresses, or order line items.

3. Where data is stored

All data is stored in a PostgreSQL database hosted on DigitalOcean infrastructure in the United States (New York region). Data is encrypted in transit (HTTPS/TLS) between Shopify, your browser, and our servers.

4. Who we share data with

We do not sell or share your data with third parties. The app communicates only with Shopify's APIs to perform its functions. There are no analytics services, advertising networks, or external integrations.

5. Data retention and deletion

  • Data is retained while the app is installed.
  • When you uninstall the app, your access tokens are deleted immediately. Your other data (bundles, discounts, settings) is retained for 48 hours so that reinstalling within that window restores your setup.
  • After 48 hours, Shopify triggers the shop/redact webhook and we permanently delete all data associated with your shop.
  • Customer data deletion requests (customers/redact webhook) are honored within 30 days of receipt.

6. Your rights

You can request a copy of, correction to, or deletion of any data we hold about you or your customers by emailing us. Customer data deletion is also handled automatically via Shopify's GDPR webhooks.

7. Cookies

BundlePlus uses only essential cookies set by Shopify to maintain your embedded session. We do not set tracking, analytics, or advertising cookies.

8. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent change.

9. Contact

Questions about this policy? Email admin@devconsole.co.