Bundle Station privacy policy

Effective September 26, 2026. Bundle Station is operated by Mohamed Abdelsalam Abdelhameed Abdelrahman. Contact mohamedabdelsalam@masriatextile.com about this policy or a data request.

What the app does

Bundle Station lets Shopify merchants configure product bundles and quantity discounts and measure their performance. For store shopper data, we process information to provide these features on the merchant’s behalf. The merchant remains responsible for their store’s privacy notices and handling shopper requests.

Information used

• Store identifiers, authentication sessions and tokens, and the permissions needed to connect the installed app to Shopify. Shopify merchant session records can include the merchant user’s identifier, name, email, role and locale.
• Offer settings and selected product, collection and variant identifiers. Product titles, images, available options, inventory availability and prices are retrieved from Shopify to display and validate offers.
• Consented widget view and cart-add events with store, deal, event identifiers and timestamps. A random browser identifier expires after 30 days and is created only when Shopify permits analytics processing. The server stores a store-specific cryptographic hash to measure distinct browsers, not identified people. Clearing browser storage or using another device creates a new visitor.
• Attributed order identifiers, dates, currencies, product breakdowns, bundle and order merchandise revenue, refunds, cancellation and test-order status, used for bundle reporting and reconciliation. Where Shopify grants access, we store shipping country codes and product costs for country reports and estimated gross profit. Consented cart-add identifiers link the hashed browser identifier to bundle orders for aggregate purchase conversion.
• Privacy request identifiers and associated order identifiers; store-scoped order fingerprints prevent erased order records from being imported again.
• Merchant agreement acceptance: store, agreement version, content fingerprint, UTC acceptance time and the accepting Shopify user identifier when available. These records are removed with the store-erasure request.
• Information you choose to send when contacting support. Please do not send passwords, access tokens or payment card details.

Shopify order notifications can contain additional customer information in transit. The app selects the fields needed for attribution and does not store shopper names, emails, phone numbers, full postal addresses or payment card data in its analytics database. Country reporting stores only the two-letter country code. Shopify handles subscription billing; the app does not collect payment card details.

Purpose and choices

We use this information to operate offers, authenticate store access, calculate and troubleshoot discounts, report bundle performance, provide support and respond to privacy requests. We do not sell shopper data or use it for advertising profiles or decisions that have legal or similarly significant effects on individuals.

Widget analytics follow the Shopify customer privacy consent signal. Shoppers can use the store’s privacy controls; merchants can deactivate offers or uninstall the app. Contact us or the merchant to request access, correction or deletion.

Service providers and storage

The app uses Shopify for commerce and billing, Cloudflare for hosting and database connectivity, and a separate Supabase PostgreSQL project in Ireland for application records. Cloudflare processes requests on its network, so processing may occur outside your country. These providers process information needed to deliver their services under their applicable terms and data protection arrangements. App data is separated by store in application queries.

Retention and deletion

Offer configuration and attributed analytics are retained while the app is installed so merchants can access historical reports. Authentication sessions are removed on receipt of the uninstall notification. Store data, privacy requests and erasure fingerprints are deleted when Shopify sends the store-erasure request after uninstall. Customer-erasure requests remove the specified attributed order records and their references from stored request exports. Redaction fingerprints remain until store erasure to prevent re-import.

Merchants can access customer-request exports inside the app and must respond through their established privacy process. Contact support for a data request while the app is installed. Provider backups may retain deleted records until their backup lifecycle expires; they are not used for ordinary reporting.

Security

The app uses HTTPS, authenticated Shopify requests, verified webhook signatures, store-scoped database access and encrypted database connections. Service providers supply infrastructure storage protections. Access is limited to operating and supporting the service. No system can guarantee absolute security.

Policy updates

We update this page when our processing changes and identify the effective date. Contact us if you need an explanation of a change or additional information about your data.

Merchant Data Processing Agreement · Support and setup guide