Privacy Policy

Last updated: February 19, 2026

Overview

BundleForge is operated by JRL Software Ltd, a company registered in the United Kingdom ("we", "our", "us"). BundleForge is a Shopify application that helps merchants create and manage product bundles. This privacy policy explains what data we collect, why we collect it, how we use it, and how we protect it.

Data we collect

When you install BundleForge, we access the following data from your Shopify store via the Shopify API:

Product and collection data

  • Product titles, descriptions, variants, and pricing
  • Product and collection identifiers
  • Inventory levels (where applicable to bundle availability)

Order data

  • Order totals and line items (for bundle analytics)
  • Discount application data

Data you provide

  • Bundle configurations (products, pricing rules, display settings)
  • Account information via Shopify authentication

Data we do not collect

We do not access, collect, or store:

  • Customer personal information (names, emails, addresses)
  • Customer payment or credit card details
  • Customer browsing or behavioral data

How we use your data

We use the data listed above solely to:

  • Create and manage product bundles on your store
  • Apply bundle discounts at checkout via Shopify Functions
  • Generate bundle analytics and performance reports
  • Power AI-driven bundle recommendations
  • Process billing through Shopify's billing API

We do not sell, rent, or share your data with third parties for marketing or advertising purposes.

Data storage and security

  • All data is encrypted in transit (TLS 1.3) and at rest (AES-256)
  • Data is stored in a dedicated database isolated from other applications
  • We request only the minimum Shopify API scopes needed
  • Access to production systems is restricted and authenticated

Data retention

We retain your data for as long as the app is installed on your Shopify store. When you uninstall BundleForge, we delete all associated data within 30 days. You may also request immediate deletion by contacting us.

Your rights

You have the right to:

  • Access the data we hold about your store
  • Request correction of inaccurate data
  • Request deletion of your data at any time
  • Uninstall the app, which triggers data deletion

GDPR and international data transfers

We process data in accordance with the UK GDPR, EU GDPR, and applicable data protection laws. If your data is transferred outside your region, we ensure appropriate safeguards are in place.

Changes to this policy

We may update this privacy policy from time to time. We will notify you of material changes by updating the "Last updated" date above.

Contact

If you have questions about this privacy policy or your data, contact JRL Software Ltd at [email protected].

JRL Software Ltd
United Kingdom