1. Introduction

Devmont Digital ("we", "us", or "our") operates the Bundlr Shopify application ("the App"). This Privacy Policy explains what information we collect when you install and use the App, how we use that information, and the choices you have.

By installing the App you agree to the collection and use of information in accordance with this policy. If you do not agree, please uninstall the App.

2. Information We Collect

We collect the minimum data necessary to provide the App's functionality:

Store & Merchant Data

• Your Shopify store domain and shop ID (used to associate your campaigns with your store).
• Product and variant information you select when building bundle campaigns (product IDs, titles, images, prices).
• Campaign configuration you create: discount type, discount value, schedule dates, layout preferences, and colour settings.
• Shopify access tokens required to interact with the Shopify Admin API on your behalf (stored securely and never shared).

Analytics Data

• Bundle widget impression counts (how many times a bundle widget was viewed on your storefront).
• Add-to-cart event counts (how many times a customer clicked "Add Bundle to Cart").

Support Communications

If you contact us through the Support page or via email, we collect your name, email address, and the content of your message in order to respond to your query.

3. How We Use Your Information

We use the information we collect to:

• Provide and operate the App — create, store, and display your bundle campaigns on your storefront.
• Apply automatic discounts at checkout via Shopify Functions using your campaign configuration.
• Display analytics metrics in your dashboard so you can measure bundle performance.
• Respond to support requests and technical queries.
• Maintain and improve the App's features and reliability.

We do not use your data for advertising, profiling, or any purpose unrelated to operating the App.

4. Data Storage & Security

Your campaign data is stored in a secure database managed by Devmont Digital. We use industry-standard security measures including:

• Encrypted connections (HTTPS/TLS) for all data in transit.
• Access controls ensuring only authorised systems can access your store's data.
• Shopify access tokens are stored securely and are scoped to the minimum permissions required.

No system is perfectly secure. If you have concerns about the security of your data, please contact us at support@devmontdigital.io.

5. Data Sharing & Third Parties

We do not sell, rent, or trade your data to any third party. We share data only in the following limited circumstances:

• Shopify Inc. — the App interacts with Shopify's Admin and Storefront APIs to read product data and create discount codes. Your data is subject to Shopify's Privacy Policy.
• Infrastructure providers — we use cloud hosting and database services to run the App. These providers process data only as instructed by us and are bound by appropriate data processing agreements.
• Legal requirements — we may disclose data if required to do so by law or in response to valid legal process.

6. Data Retention

We retain your store data for as long as the App is installed. When you uninstall Bundlr, we automatically receive a webhook from Shopify and will delete your store's campaign data, discount configurations, and associated access tokens within 30 days of uninstallation.

If you wish to request immediate deletion of your data, please contact us at support@devmontdigital.io.

7. Your Rights

Depending on your location, you may have rights regarding your personal data, including:

• Access — the right to request a copy of the data we hold about your store.
• Correction — the right to request correction of inaccurate data.
• Deletion — the right to request deletion of your data.
• Portability — the right to receive your data in a structured, machine-readable format.

To exercise any of these rights, please email us at support@devmontdigital.io.

8. Cookies

The Bundlr admin dashboard (embedded in Shopify Admin) uses session cookies required by Shopify's app embedding framework for authentication. We do not use third-party tracking or advertising cookies.

The storefront bundle widget does not set any cookies on your customers' browsers.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of the App after changes constitutes your acceptance of the updated policy.