Privacy Policy

Last updated: July 7, 2026

Swonie Creative Design ("we", "us", or "Bandle") operates the Bandle Shopify app ("the App"). This Privacy Policy explains what data the App collects, how it is used, and the rights you have over it. By installing the App, you agree to the practices described here.

Data we collect

Bandle is built to hold the minimum data required to create and display product bundles. We do not collect, store, or process customer personal data (names, emails, addresses, or order details). Specifically, the App stores:

  • Your Shopify shop domain — to scope bundle, template, and settings records to your store.
  • Shopify product and variant IDs (GraphQL global IDs) — references to products and variants that participate in your bundles.
  • Shopify collection IDs, product types, tags, or vendor strings — used only to determine eligibility for mix & match bundles.
  • Bundle configuration data you create — titles, descriptions, discount values, quantities, and presentation settings.
  • Shopify OAuth access tokens and session data — required for the App to authenticate API requests to your store on your behalf.

How we use your data

Data is used solely to operate the App's functionality:

  • To create, store, and synchronize your bundle configurations.
  • To write bundle data to Shopify Metaobjects and product metafields so your storefront can render bundles.
  • To register and operate the Shopify discount function that applies bundle savings at cart and checkout.
  • To provide support and respond to your inquiries.

We do not sell, rent, or share your data with third parties for marketing purposes.

Data storage

Your bundle data is stored in a PostgreSQL database hosted by us in a secure environment. Shopify session data (including access tokens) is stored using Shopify's recommended session storage. All data is transmitted over encrypted (HTTPS/TLS) connections.

Data retention

We retain your bundle data for as long as the App is installed on your store. When you uninstall the App, Shopify notifies us via the app/uninstalled webhook and we delete your session data. Approximately 48 hours after uninstall, Shopify sends a shop/redact webhook and we permanently delete all remaining shop-scoped data — bundles, templates, settings, and sessions.

Your rights (GDPR & CCPA)

Under the GDPR and similar regulations, you have the right to access, correct, or delete your personal data. Because Bandle does not store customer personal data, customer data requests (customers/data_request and customers/redactwebhooks) are acknowledged with no action required. For your store data, you can export or request deletion at any time by contacting us at [email protected].

Cookies

The App itself does not set tracking cookies. Shopify's own platform cookies may apply when the App is loaded inside the Shopify admin; these are governed by Shopify's privacy policy.

Third-party services

The App communicates with the Shopify Admin API and Shopify Functions runtime. These services are governed by Shopify's Privacy Policy. We do not use any third-party analytics or advertising SDKs within the App.

Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the Shopify App Store listing or by email. The "Last updated" date above reflects the most recent revision.

Contact

For any privacy-related questions or requests, contact us at [email protected].