No meaningful end-customer personal dataThis app works with merchant, product, and configuration data.

What we store and why

Bundles stores merchant shop information, product and variant data, bundle configurations, and the order line items needed to sync bundle inventory.

It does not store meaningful end-customer PII. Order webhooks are processed to adjust bundle inventory; customer names, emails, and addresses in those payloads are not persisted.

All data lives in managed Postgres on AWS infrastructure (us-east-1), with transient job payloads in Redis (short TTL). Data is retained while the merchant's subscription is active. On uninstall, Shopify's shop/redact webhook triggers deletion within 30 days; backups age out within 35 days.

Back to Trust Center