Security and reliability
What runs where, what we store, and who you work with.
Bundles sit in your cart and your checkout, so the app behind them has to be the dependable part of your stack. This page sets out how Flex Bundles is built, where it runs, and what data it holds.
Checkout does not depend on our servers
A bundle is expanded into its components by a Cart Transform Function. Shopify runs that Function on its own infrastructure, inside your cart and checkout, and it reads the bundle's configuration from metafields in your own store.
That means the bundles you have set up keep expanding at checkout whether or not our servers are reachable. Our servers run the things around checkout: the bundle editor, the API and MCP server, analytics, inventory sync for fixed bundle parents, and expansion of orders that skip checkout.
Plan limits are never enforced at checkout either. If you go over your plan's bundle sales, your bundles keep selling.
Every change is recorded
Each time a bundle is saved or deleted, in the app, through the API, or through the MCP server, Flex Bundles keeps a copy of its configuration. A bundle that was changed or deleted by mistake can be restored from that history.
Where it runs
Bundle expansion at checkout
Shopify, as a Cart Transform Function
Bundle configuration
Your own Shopify store, in metafields
The app, API, and MCP server
Heroku
Database
Neon, on AWS infrastructure in the United States
Application logs
Papertrail
The full list of service providers is in the privacy policy.
What we store
Our database holds no customer personal data: no names, email addresses, shipping or billing addresses, and no payment details.
For analytics we keep order-level facts only: the order ID, date, total, currency, which bundles were sold, and refund amounts. The selections a customer made for a build-your-own bundle, used for reorders, are saved in your own store as a customer metafield, not in our database.
We implement Shopify's privacy webhooks. When a store is redacted, its session records, API key records, and analytics records are deleted from our database.
Access to your store
Expiring access tokens. The app's access to your store expires every hour, so it has to keep confirming it is still allowed to connect.
IP restrictions. Shopify only accepts the app's access from our own trusted servers. You can see both of these on the Security card of the app's page in your Shopify admin.
API keys. A key for the Bundles Admin API is shown once and stored only as a SHA-256 hash. Regenerating or revoking a key stops the old one working immediately, and uninstalling the app revokes it.
Prices checked on the server. Flex Bundles does not trust prices sent from the browser. Each bundle can carry server-side rules that stop a tampered price at checkout.
Who you work with
Flex Bundles is built and supported in the United States by Handstand, a Shopify development agency based in Pittsburgh, Pennsylvania. Support comes from the people who build the product, so a technical question gets a technical answer.
The Scale plan adds dedicated support, and we take on setup and custom storefront builds as scoped projects. More about us.
Who relies on it
Merchants sell millions in bundles every month through Flex Bundles, and it is rated 5.0 on the Shopify App Store. Brands running it include Wild One, Puffco, Nestig, Julep, Ami Colé, Dr. Loretta, Bliss, W&P, Perrin, Craftspring, Hudson Stems, Jukebox, Pashion, Michael Malul, and Giordano's.
Service levels
We are working on a standard service level agreement and do not publish one yet. If your procurement process needs one now, send us yours: we have completed an enterprise merchant's own SLA as part of their rollout.
Questions from your security or IT team
If your team has a security questionnaire or needs something not covered here, email robbie@flexbundles.com or book a call.