Privacy Policy

Prime Bundles & Upsell App · Last updated: June 23, 2026

This Privacy Policy explains what information Prime Bundles & Upsell App ("the App", "we", "us") collects when a merchant installs it on their Shopify store, how that information is used, and the choices available to merchants and their customers. By installing the App you agree to this policy.

1. Information we collect

The App collects the minimum data needed to run product add-on offers. With the merchant's permission, it accesses and stores:

• Store information — your myshopify.com domain and the access token Shopify issues at install (used only to call Shopify on your behalf).
• Product, discount and theme data — product and variant details, discount configuration, and which app blocks are present on your theme, read through Shopify's Admin API so you can build and publish offers.
• Offer configuration — the add-on offers you create (titles, selected products, discount values, layout and styling).
• Anonymous performance data — counts of widget views and add-to-cart actions, and, for orders that include an offer, the order's monetary amount together with the offer identifier. These records are not linked to any individual shopper.

2. Information we do NOT collect

The App does not collect or store personally identifiable information about your customers — no names, email addresses, shipping addresses, phone numbers, or payment details. Order analytics record only the offer identifier and the amount; they contain no buyer identity.

3. How we use information

• To create, publish, and display your add-on offers on your storefront.
• To apply the automatic discount you configure to qualifying cart lines.
• To show you aggregate performance analytics (views, add-to-carts, attributed revenue) inside the app.
• To operate, secure, troubleshoot, and improve the App.

4. How information is shared

We do not sell your data and we do not share it with third parties for advertising. Data is exchanged only with Shopify to provide the service, and is stored in our application database on infrastructure we control. We may disclose information if required by law.

5. Data retention and deletion

We keep your store's configuration and analytics for as long as the App is installed. The App honors Shopify's mandatory compliance webhooks:

• shop/redact — after you uninstall, Shopify notifies us and we delete your store's offers and analytics.
• customers/redact and customers/data_request — because we store no personal customer data, there is no customer personal data to return or erase; we acknowledge these requests accordingly.

You can also contact us at any time to request deletion of your data.

6. Security

Data is transmitted over encrypted HTTPS/TLS connections and stored in an access-controlled database. Access tokens are kept confidential and used only to make authorized Shopify API calls on your behalf.

7. Your rights

Depending on your jurisdiction (including under the GDPR and CCPA), you may have the right to access, correct, export, or delete the information we hold about your store. To exercise these rights, email us at the address below.

8. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the "Last updated" date above. Continued use of the App after an update constitutes acceptance of the revised policy.

9. Contact

Questions or requests about this policy or your data: hello@suitexa.com.