BundlePeople privacy policy

Last updated 26 October 2026

BundlePeople (“the app”) is a Shopify app that adds bundles, quantity breaks and other discounts to Shopify stores. It is operated by Rishub Communications (“we”). This policy explains what the app collects when a merchant installs it, why, and what happens to it.

What we collect

• Store details: the store’s Shopify address, name and currency, and the access key Shopify gives the app so it can work for the store.
• Offers: the bundles and discounts the merchant creates in the app.
• Order details for offers: for orders that used a BundlePeople discount, the order number, order total, the discount amount and the value of the products the offer sold. We use this for the merchant’s analytics and to work out the Pay-as-you-grow fee.
• Products bought together: Bundle Finder reads which products appear in the same recent orders to suggest bundles. Only product names and quantities are used.

We do not collect or store shoppers’ names, email addresses, phone numbers or addresses, and we do not track shoppers across websites.

Why we use it

Only to run the app for the merchant: apply their discounts at checkout, show offers in their store, show their results, and bill their plan through Shopify. We never sell data and never use it for advertising.

Where it is kept

The app runs on Cloudflare and stores its data in a Supabase (PostgreSQL) database in the AWS Mumbai region. Connections are encrypted, and the database is encrypted at rest. Shopify, Cloudflare and Supabase act as our service providers; nobody else receives the data.

How long we keep it

While the app is installed. When a merchant uninstalls, the app’s access ends immediately, and we delete the store’s data when Shopify asks us to (48 hours after uninstall). Shopper data requests and deletion requests sent through Shopify are answered within 30 days; because we hold no shopper personal data, there is normally nothing to return or delete.

Your choices

Merchants can delete offers at any time and can ask us to delete all of their store’s data by emailing us. Shoppers can contact the store they bought from, which can pass the request to us through Shopify.

Contact

Questions about this policy or your data: support@bundlepeople.com.