Privacy Policy

DRAFT for review. Last updated: 2026-10-23. This draft follows the pattern used on other CNR Consulting Services, Inc. Shopify apps (for example TallyGrid). It is not legal advice. Counsel should review before publish.

BundleMath is a Shopify admin app that keeps native Shopify Bundle prices in sync with component product prices. It is provided by CNR Consulting Services, Inc., a Virginia corporation.

BundleMath connects to your store through Shopify OAuth. It asks Shopify for the product and variant access needed to read component and bundle prices and to write updated bundle prices. It does not ask for customer or order access, and it does not store customer or order data.

Data we store

• Shop domain and the Admin API access token (and a refresh token when Shopify issues one)
• Per-bundle and store-wide pricing rules you set in the app (for example fixed or percent discount, rounding preference, and compare-at sync when enabled)
• Sync and change-log records used for audit and one-click revert: product and variant identifiers, prior price, new price, discount applied, and when the write happened
• A billing snapshot from Shopify: plan, status, and charge id
• Mandatory Shopify compliance webhook receipts as required for GDPR and Partner requirements

Data we do not store

• Customer personal information
• Order contents or payment card details
• Staff name or email beyond what Shopify may include on a session identifier for app use

How we use the data

We use this data only to run BundleMath for your shop: to detect component price changes, compute and write bundle prices, show the change log and audit screen, bill through Shopify, and respond to Shopify compliance webhooks.

Under the Shopify Partner Program Agreement (including section 9.15), we do not use merchant data to train AI models. Sync logs are kept for sync, audit, and revert only. They are not fed to any model.

Billing

Subscription charges are processed by Shopify through the Shopify Billing API. BundleMath does not store your payment card numbers.

Retention

On uninstall, BundleMath deletes the session, pricing rules, and sync change-log history for the shop. It marks billing cancelled. A billing row may be retained until Shopify sends the shop/redact webhook.

When Shopify sends the shop/redact webhook, BundleMath deletes the remaining shop data, including billing records.

Customer data-request and customer-redact webhooks are acknowledged. There is no customer record for BundleMath to return or delete.

Sharing

We do not sell shop data. We share data only with Shopify as needed to operate the app, and with service providers who host the app under our instruction, subject to confidentiality obligations.

Contact

Privacy questions: [email protected]

CNR Consulting Services, Inc.
Virginia, United States

Governing law

Virginia law governs this privacy policy, without regard to conflict-of-law rules.