Privacy Policy

Last updated: November 8, 2025

BetterBundle ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Shopify app that provides AI-powered product recommendations.

1. Information We Collect

To provide our product recommendation services, we collect the following types of information:

Shop Data

• Store information (shop domain, store name, settings)
• Product data (product information, pricing, inventory, variants)
• Order information (order details, order history, revenue data)
• Customer data (customer information, purchase history, behavior patterns)
• Collection data (product collections, categories)

Usage Data

• How merchants interact with the app (feature usage, settings preferences)
• Performance metrics and analytics data
• Customer interaction data (product views, cart events, search queries)

Technical Data

• IP addresses and device information for security and analytics
• Browser type and version information
• Session data and authentication tokens

2. How We Use Your Information

We use the collected information to:

• Provide AI-powered product recommendation services to merchants
• Analyze customer behavior and product performance to generate accurate recommendations
• Improve our recommendation algorithms and machine learning models
• Provide analytics, insights, and performance metrics to merchants
• Ensure app security, prevent fraud, and maintain service quality
• Process billing and subscription management
• Provide customer support and respond to inquiries
• Comply with legal obligations and enforce our terms

3. Data Storage and Security

We implement industry-standard security measures to protect your data:

• Data is encrypted in transit using TLS/SSL protocols
• Data is stored in secure databases with access controls
• Access to data is restricted to authorized personnel only
• We regularly review and update our security practices
• Data is stored in compliance with applicable data protection laws

Your data is stored on secure servers and is only accessible to authorized personnel who need it to provide our services.

4. Data Sharing and Disclosure

We do not sell your data. We may share data in the following circumstances:

• Service Providers: We may share data with third-party service providers necessary to operate the app (hosting, analytics, payment processing). These providers are contractually obligated to protect your data.
• Shopify: We share data with Shopify as required by the Shopify Partner Program Agreement and API Terms of Use.
• Legal Requirements: We may disclose data when required by law, court order, or to protect our rights and security.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, data may be transferred to the acquiring entity.

5. Your Rights and Choices

You have the following rights regarding your personal data:

• Access: Request access to your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data (subject to legal obligations)
• Portability: Request a copy of your data in a machine-readable format
• Opt-Out: Uninstall the app to stop data collection
• Objection: Object to certain types of data processing

To exercise these rights, contact us at [email protected].

6. GDPR Compliance

We comply with the General Data Protection Regulation (GDPR) and other applicable privacy laws. We have implemented the following measures:

• Data Request Webhooks: We subscribe to Shopify's mandatory compliance webhooks to handle data requests from customers
• Data Deletion: We honor deletion requests through our GDPR webhook handlers (customers/data_request, customers/redact, shop/redact)
• Shop Data Deletion: When you uninstall the app, we delete your shop data within 48 hours as required by Shopify
• HMAC Verification: We verify all webhook requests using HMAC signatures to ensure authenticity
• Data Minimization: We only collect data necessary for providing our services

7. Data Retention

We retain your data for as long as necessary to provide our services and comply with legal obligations:

• Active app installations: Data is retained while the app is installed
• After uninstallation: Shop data is deleted within 48 hours
• Customer data requests: Processed within 30 days as required by GDPR
• Legal requirements: Some data may be retained longer if required by law

8. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Provide app functionality and authentication
• Analyze app usage and performance
• Improve user experience

You can manage cookie preferences through your browser settings. Note that disabling cookies may affect app functionality.

9. Children's Privacy

Our app is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence. We ensure that appropriate safeguards are in place to protect your data in accordance with applicable data protection laws.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

• Posting the updated policy on this page
• Updating the "Last Updated" date at the top of this policy
• Sending email notifications for material changes (if you have provided your email)

Your continued use of the app after changes are posted constitutes acceptance of the updated policy.

12. Shopify API Terms

Our use of Shopify data is governed by the Shopify API License and Terms of Use. We comply with all requirements including:

• Using data only for the purposes stated in this policy
• Not sharing merchant data with third parties without consent
• Implementing mandatory compliance webhooks
• Ensuring data security and proper access controls

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: [email protected]
• Website: https://betterbundle.online

We will respond to your inquiry within 30 days as required by applicable privacy laws.

14. Data Processing Agreement

By using BetterBundle, you acknowledge that:

• We act as a data processor when processing data on behalf of merchants
• Merchants are responsible for obtaining necessary consents from their customers
• We process data in accordance with merchant instructions and this Privacy Policy
• We implement appropriate technical and organizational measures to protect data