Privacy Policy
Last updated: 28 September 2026
BundlePilot is a Shopify app under active development. This policy explains exactly what it stores, why, and for how long.
Who we are
BundlePilot is operated by Boldnsmart (boldnsmart.com), based in Lithuania, which acts as the data controller for the data described in this policy. Lithuania is in the European Union, so the GDPR applies. You can reach the controller at skai@boldnsmart.com.
What we do not collect
BundlePilot never reads, requests or keeps shopper names, email addresses, shipping addresses or payment details. The only thing a shopper writes that BundlePilot keeps is the optional gift message they add to a bundle, described below.
BundlePilot contains no analytics, advertising or tracking scripts, and sets no cookies beyond the session cookie Shopify itself requires to keep you signed in to the embedded app.
What we store
- Your store's domain — to associate your account with your shop and no one else's.
- Your Shopify staff account details, as provided by Shopify when you install and sign in: your name, email address, locale, Shopify user id, and whether you are the account owner or a collaborator.
- Access and refresh tokens issued by Shopify. These are credentials, not personal data, and are never shared.
- Your bundles — the bundles, sizes, slots and product choices you set up.
- Bundle order records — for each order: its Shopify order number and ID, when it was placed, its currency and totals, which bundle options were chosen, and the titles and quantities of its items; plus refunded amounts on bundle items. These power your Analytics and set your plan's bundle-sales tier. They contain no shopper name, email or address.
- The shopper's gift message, if they wrote one — so it appears on your Bundle orders page when you write the card. This is the only shopper-written personal data BundlePilot holds.
- Your app settings.
Why we store it
Solely to provide the service and keep you signed in. We do not sell data, and we do not use it for advertising or profiling.
Where it is stored
Data is held in a PostgreSQL database hosted by Neon in the United States (Oregon), and the app runs on Railway servers in the United States. Because Boldnsmart is based in the EU, this is a transfer of personal data outside the EU, covered by Neon's and Railway's certifications under the EU-U.S. Data Privacy Framework. Product and price data is read from and written to Shopify through their Admin API.
How long we keep it
Gift messages are erased automatically 12 months after the order was placed; the rest of the order record is kept for billing and analytics until you uninstall.
When you uninstall BundlePilot, Shopify notifies us and we erase your store's data, including your session. Shopify sends this notification 48 hours after uninstall, so erasure happens then rather than instantly.
Your rights
If you are in the EEA or UK you have the right to access, correct, export, restrict or erase your personal data, and to object to its processing. Because BundlePilot holds so little, uninstalling the app already triggers erasure of everything tied to your store. For anything else, email skai@boldnsmart.com and we will respond within 30 days.
Requests Shopify forwards on a shopper's behalf are handled automatically. A redaction request (customers/redact) erases the gift message on that shopper's orders. For a data request (customers/data_request), the gift message is available to you on your Bundle orders page and on the order itself in Shopify.
Changes
If this policy changes materially we will update the date at the top of this page. Continued use of the app after a change means the updated policy applies.
Contact
Questions about this policy or about your data: skai@boldnsmart.com.