Merqio App

Privacy Policy — Bundlr

Last updated: June 1, 2026

1. Overview

Bundlr (“the App”, “we”, “us”) is a Shopify application that allows merchants to create product bundles as real Shopify products with automatic inventory synchronization. This Privacy Policy explains what data we collect, how we use it, and your rights as a merchant or end customer.

2. Data We Collect

From Merchants (Shopify Store Owners)

When you install Bundlr, we access the following data from your Shopify store via the Shopify API:

  • Store information — shop domain, plan type, currency
  • Products and variants — product titles, variant titles, prices, images, and inventory item IDs for products you add to bundles
  • Inventory levels — stock quantities per location for bundle components
  • Orders — order line items and payment status (used solely to trigger inventory adjustments when a bundle is purchased)

Data We Store

We store the following in our database to operate the App:

  • Bundle configurations (title, pricing, discount settings, buffer quantity)
  • Component product and variant IDs, titles, prices, and image URLs
  • Shopify product and variant IDs for the synthetic bundle products we create
  • Your store’s billing plan within our App (Free, Basic, or Pro)

From End Customers

We do not collect, store, or process any personal data from your store’s customers. Customers interact with bundles as standard Shopify products — their checkout, payment, and personal information is handled entirely by Shopify.

3. How We Use Your Data

We use merchant data solely to provide the App’s functionality:

  • Creating and managing bundle products in your Shopify admin
  • Synchronising inventory between bundle components and the bundle product
  • Adjusting inventory when bundle orders are paid
  • Enforcing plan-based bundle limits
  • Displaying bundle and inventory information within the App

We do not use your data for advertising, profiling, or any purpose unrelated to operating the App.

4. Data Sharing

We do not sell, rent, or share your data with third parties except:

  • Shopify — we read and write data to your store via Shopify’s API as necessary to operate the App
  • Gadget (gadget.dev) — our backend infrastructure provider, which hosts the App’s database and server-side logic. Gadget processes data on our behalf under their own privacy and security policies
  • Legal requirements — we may disclose data if required by law or to protect our legal rights

5. Data Retention

  • Bundle and component data is retained for as long as your store has the App installed
  • When you uninstall Bundlr, we will delete your store’s data from our systems within 48 hours
  • You may request immediate deletion by contacting us at the address below

6. Security

We rely on Gadget’s infrastructure for data storage and processing. Data is encrypted in transit (TLS) and at rest. We access your Shopify store only via OAuth tokens granted through Shopify’s standard installation flow, and only request the scopes necessary to operate the App.

7. Shopify App Store Compliance

Bundlr complies with Shopify’s Partner Program Agreement and API Terms of Service. We only request API access scopes required to provide the bundle management and inventory sync features described in the App listing.

8. Your Rights

As a merchant you may:

  • Access the data we hold about your store by contacting us
  • Delete your data by uninstalling the App or contacting us directly
  • Correct any inaccuracies by contacting us

If you are subject to GDPR (European Economic Area) or CCPA (California), these rights apply to personal data we hold that is associated with your account.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the App or email. Continued use of the App after changes are posted constitutes acceptance of the revised policy.

10. Contact

If you have questions about this Privacy Policy or want to request data deletion:

Email: jbrodeveloper@gmail.com