Privacy and security in Bundle Optimizer
How Bundle Optimizer handles your Shopify store's data, in plain terms.
AI suggests. Deterministic maths decides.
AI only suggests which products belong together across your catalogue. Whether an offer is safe to launch is always decided by deterministic, quantitative mathematics, tested on product fit, sales evidence, cost, margin and stock.
- AI only suggests which products belong together. AI never sets a price
- Deterministic, quantitative mathematics decides every offer and discount
- Nothing reaches your storefront without your approval
Signing in
Bundle Optimizer runs inside your Shopify admin and uses Shopify to verify your store. There is no separate password to create or leak. Role-based access decides what each member of your team can see and do.
What data the app uses
- Catalogue data: products, variants, prices, inventory and recorded costs.
- Recent order lines, typically the last 60 days, to find products bought together and attribute bundle revenue.
- Your settings, approvals and offer configuration.
Core workflows are designed not to store customer names, email addresses, phone numbers, street addresses or payment details. Store data is never sold, rented or shared for advertising.
AI-assisted features
Selected product and store-operational data, such as titles, prices and inventory levels, is sent to an AI service to help draft recommendations and offer copy. Customer names, payment details and customer contact records are not sent as part of this.
Deletion and Shopify privacy requests
- When you uninstall, Shopify session data is removed and the app's access tokens are revoked.
- When Shopify sends its shop deletion request, the shop record and related app data are deleted unless the law requires us to keep them.
- Shopify's customer data request and customer redaction webhooks are handled, including deleting matching order lines.
Security
- Production secrets are kept in a managed key vault, not in source code.
- Administrative access to the systems behind the service requires multi-factor authentication.
- Application logs redact tokens, API keys and email addresses.
- A documented incident response process covers containment, investigation, recovery and notification.
Contact
Privacy questions and data requests: privacy@sparande.co.uk.
This page is a summary. The full statements are the Bundle Optimizer Privacy Policy and the Bundle Optimizer Terms of Service.
Read next: Bundle Optimizer faq, Bundle Optimizer help.