Privacy Policy

Last updated: December 15, 2025

This Privacy Policy describes how Flex Bundles ("we", "us", or "our") collects, uses, and shares information when you install and use our Shopify app.

Information We Collect

Merchant Account Information

When you install Flex Bundles, we store:

  • Your Shopify store domain
  • An access token for API communication

Onboarding Information

During app setup, you may optionally provide:

  • Contact name and email
  • Business type (merchant, agency, developer)
  • Your biggest challenge with bundles

This information is used to provide personalized onboarding support and is not stored in our database. It is only used to contact you about your bundle needs and is not shared with third parties.

Order Data (Read-Only)

To provide analytics on bundle performance, we access order data through Shopify's API, including:

  • Order totals and currency
  • Line item amounts and bundle groupings

We use this data to calculate aggregate metrics (total revenue, units sold, average order value). We do not store order data or access customer personal information (names, emails, addresses, payment details).

How We Use Your Information

We use the information we collect to:

  • Authenticate your access to the app
  • Provide bundle creation and management functionality
  • Display analytics on your bundle performance
  • Communicate with you about your account

Data Storage and Retention

Your data (your Shopify store domain and an access token for API communication) is stored securely in our database. We retain your information for as long as your app remains installed. Upon uninstallation, session data is automatically removed.

Data Sharing

We do not sell, rent, or share your personal information with third parties for marketing purposes. We may share data only:

  • If required by law or to protect our rights

Your Rights

You may request access to, correction of, or deletion of your personal information by contacting us. We respond to data requests in compliance with GDPR and other applicable privacy regulations.

Shopify Data Compliance

We comply with Shopify's API terms and mandatory privacy webhooks for customer data requests and deletion.

Contact Us

For privacy questions or data requests, contact:
Email: robbie@handstand.codes