Privacy Policy

COD Bundles - Upsell & Offers · Last updated June 12, 2026

This Privacy Policy explains how the COD Bundles - Upsell & Offers app ("the App", "we", "us") collects, uses, and protects information when a merchant installs and uses the App on their Shopify store. By installing the App, you agree to the practices described here.

Information we collect

To provide the App's functionality, we process:

• Store information. Your store domain and Shopify access token, used to authenticate the App and connect to your store.
• Product and bundle configuration. Products, variants, prices, and the bundle offers you create within the App.
• Order data. When an order is created, we read the order's line items (product, variant, and quantity) and order identifier to calculate the extra revenue your bundles generate. We do not collect customers' names, email addresses, phone numbers, or shipping or billing addresses.

How we use information

We use the information solely to:

• Display and manage your bundle offers and discounts.
• Render the bundle widget on your storefront product pages.
• Report the additional revenue generated by your bundles.

We process the minimum amount of data needed to deliver this functionality, and we limit our use of that data to these purposes.

Sharing of information

We do not sell, rent, or share your data with third parties for marketing or advertising. Data is stored on our own infrastructure and is used only to operate the App.

Data retention

We retain your configuration and aggregated bundle sales data only for as long as the App is installed. When you uninstall the App, or upon a valid deletion request, the associated data is deleted. We honor Shopify's mandatory compliance webhooks, including customers/data_request, customers/redact, and shop/redact.

Security

Data is transmitted over HTTPS and stored in a database on a secured server. We apply reasonable technical and organizational measures to protect information against unauthorized access, alteration, or disclosure.

Your rights

Merchants and their customers may request access to, or deletion of, the personal data we process. Requests are handled in line with applicable data protection laws, including the GDPR. To exercise these rights, contact us using the details below.

Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

Contact

If you have any questions about this Privacy Policy or our data practices, contact us at info@ecomsurfers.com.