Privacy Policy

Last updated: September 12, 2026

AB Bundles App & Bundle Upsell ("we", "our", or "us") operates the AB Bundles App & Bundle Upsell Shopify application. This Privacy Policy describes how we collect, use, and share information when you install and use our application.

1. Information We Collect

When you install AB Bundles App & Bundle Upsell, we collect the following information through the Shopify API and the application interface:

• Store information: Your store name, domain, email address, and currency settings.
• Product data: Product titles, prices, and IDs to display bundle deals on your storefront.
• Order data: Order information to track bundle performance and provide analytics. We do not collect customer personal information such as names, addresses, or payment details.
• Application usage data: Anonymous navigation paths, clicks, browser and device details, and privacy-masked session replays of the AB Bundles App & Bundle Upsell admin interface. Text, form inputs, images, Shopify URL parameters, and referring URLs are masked or removed before this data is sent.

2. How We Use Your Information

We use the information we collect to:

• Provide and operate the AB Bundles App & Bundle Upsell application.
• Create and manage automatic discounts on your behalf.
• Display bundle deal widgets on your storefront.
• Generate analytics and reports about bundle performance.
• Understand application usage, reproduce interface issues, and improve the user experience.
• Communicate with you about your account and provide support.

3. Data Sharing

We do not sell, rent, or share your personal information or store data with third parties, except:

• As required to provide our services (e.g., Shopify API interactions).
• If required by law, regulation, or legal process.
• With service providers who assist in operating our application, including Fly.io for hosting and PostHog for privacy-masked product analytics and session replay, subject to their contractual data protection obligations.

4. Data Storage & Security

Application data is stored on servers hosted by Fly.io. Privacy-masked usage analytics and session replays are processed by PostHog in the United States. We implement appropriate technical and organizational measures to protect data, including encryption in transit (TLS/SSL), access controls, and collection-side masking.

5. Data Retention

We retain store data for as long as you have our app installed. Upon uninstallation, we will delete your store data within 30 days, unless retention is required by law. Usage analytics and session replays are retained only for the period configured in our PostHog account and are then deleted automatically.

6. Your Rights

You have the right to:

• Access the data we hold about your store.
• Request deletion of your data.
• Uninstall the application at any time, which will stop all data collection.

7. GDPR Compliance

For merchants and customers in the European Economic Area, we comply with the General Data Protection Regulation (GDPR). We process data as a data processor on behalf of merchants (data controllers). We respond to data subject requests forwarded by merchants promptly.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date and, where appropriate, through in-app notifications.

9. Contact Us

If you have questions about this Privacy Policy, please contact us at:

Email: [email protected]