SPARANDE

Sparande · E-commerce · Bundle Optimizer

Terms of Service

Last updated: March 26, 2026 · Applies to: bundle-optimizer

1. Acceptance of These Terms

Bundle Optimizer is provided for merchant-operated inventory monitoring, bundle planning, campaign execution, and reporting inside Shopify.

By installing or using Bundle Optimizer, merchants agree to these Terms, the public Privacy Policy, and the Data Processing Agreement set out below for the data we process on their behalf.

If you need a countersigned copy of this agreement or procurement-specific terms for Alliance review, use the Alliance quote flow or email sales@sparande.co.uk.

2. Service Overview

Bundle Optimizer provides workflow tooling, recommendations, and automation controls for store operations. The app helps merchants:

  • Monitor inventory and identify bundle opportunities.
  • Run product relationship and bundle analysis.
  • Generate AI-assisted bundle recommendations and campaign copy.
  • Execute supported Shopify-side actions when merchants choose to launch a bundle.
  • Review reporting, attribution, and operational history.

Commercial terms, pricing, and service commitments depend on the active plan and any sales-led agreement in place for Alliance.

3. Merchant Responsibilities

Merchants remain responsible for:

  • Pricing decisions.
  • Customer communication.
  • Merchandising configuration.
  • Compliance with local laws.
  • Compliance with platform rules.
  • Internal approval policies.

Bundle Optimizer provides the workflow tooling and automation controls, but merchant teams retain operational ownership.

4. Data Processing Agreement

This Data Processing Agreement (“DPA”) forms part of the Terms and governs Bundle Optimizer's processing of personal data on behalf of the merchant. It is accepted when the merchant installs or uses the app.

If a separate signed data-processing agreement is in place for an Alliance or enterprise plan, that signed agreement controls to the extent of any conflict.

4.1 Roles of the parties

For personal data contained in the merchant's Shopify store:

  • The merchant is the data controller.
  • Bundle Optimizer is the data processor.

We process that data only on the merchant's documented instructions, which include these Terms, the app's configuration, and the actions merchants take in the app, and as required by applicable law. Shopify acts as the merchant's data-source platform.

4.2 Scope, nature, and purpose of processing

Processing lasts for the term of installation plus the retention windows described in the Privacy Policy.

The nature and purpose of processing include:

  • Inventory monitoring.
  • Product relationship and bundle analysis.
  • AI-assisted bundle recommendations.
  • Campaign execution.
  • Reporting.
  • Security and operation of the service.

The categories of data subjects are:

  • The merchant's staff and authorized users.
  • Only where a specific privacy, audit, or support workflow requires it, the merchant's customers.

The categories of personal data are as described in the Privacy Policy, primarily merchant and staff authentication and audit data, plus operational store data. Core workflows are designed to avoid storing customer PII.

5. Sub-processors

The merchant authorizes Bundle Optimizer to engage sub-processors to deliver the service. We use them under contracts that impose data-protection obligations consistent with this DPA, and we remain responsible for their performance.

Current categories include:

  • Cloud hosting and secrets: Microsoft Azure, including application hosting, container infrastructure, and Key Vault.
  • Managed database: our managed PostgreSQL provider for operational data storage.
  • AI processing: the AI provider that generates bundle recommendations and merchant-facing copy from operational data.
  • Transactional email: our email-delivery provider for operational, audit, and privacy-response messages.
  • Error monitoring and telemetry: our application monitoring provider, with sensitive fields redacted.

We will give merchants notice of new or replacement sub-processors and a reasonable opportunity to object on legitimate data-protection grounds before the change takes effect for them.

6. Security Measures

We maintain the administrative, technical, and organizational safeguards described in the Privacy Policy, including:

  • MFA on core control planes.
  • Secret management in Azure Key Vault.
  • Authenticated Shopify sessions.
  • Redaction of sensitive fields in logs.
  • Separation of production from development data where possible.

We protect access tokens and API credentials as sensitive data.

7. Assistance With Data-Subject Requests

We assist the merchant, taking into account the nature of processing, in responding to requests from data subjects to exercise their rights.

We honor Shopify's mandatory privacy webhooks:

  • customers/data_request
  • customers/redact
  • shop/redact

We also provide a merchant data-export endpoint. Where customers submit requests directly, we direct them through the merchant or Shopify.

8. Personal Data Breach Notification

We maintain a documented incident-response process. If we become aware of a personal data breach affecting merchant data, we will notify the affected merchant without undue delay, provide the information reasonably available to support the merchant's own notification obligations, and take reasonable steps to contain and remediate the incident.

9. International Data Transfers

Merchant data may be processed in the regions where Bundle Optimizer and its sub-processors operate, which may be outside the merchant's country.

Where personal data is transferred across borders, we rely on an appropriate transfer mechanism, such as Standard Contractual Clauses or an equivalent safeguard, as required by applicable law.

10. Return and Deletion on Termination

On uninstall we promptly remove Shopify session data and revoke access tokens. On the shop/redact webhook we delete the shop record and related operational data, unless a legal retention obligation applies.

Merchants who reinstall during the billing-period restore window keep only the minimum non-PII operational data needed to restore paid-for settings. Choosing Start Fresh permanently deletes the preserved data.

11. Plan and Billing Terms

Commercial terms depend on the active plan and any merchant-specific agreement.

  • If the merchant is on a standard plan, billing is handled through Shopify Billing according to the plan selected in the app.
  • If the merchant is on an Alliance or enterprise plan, any quoted or signed commercial terms apply in addition to these Terms.

The merchant is responsible for keeping billing details current and for any charges incurred under the selected plan.

12. Service Changes and Availability

We may improve, modify, or discontinue parts of the service from time to time. We will use reasonable efforts to minimize disruption and to communicate material changes that affect merchant use of the app.

The service may be temporarily unavailable due to maintenance, third-party outages, Shopify platform issues, or events outside our reasonable control.

13. Termination

The merchant may stop using the service at any time by uninstalling the app.

We may suspend or terminate access if required to protect the service, comply with law, or address abuse, non-payment, or security risk.

14. Contact

For legal, procurement, or commercial questions:

For privacy matters: