Privacy Policy — Smart Bundle Deals

Last updated: October 14, 2026

Smart Bundle Deals ("the app") is provided by LunarCode ("we", "us"). This policy explains what information the app collects when a merchant installs it on a Shopify store, how we use it, and the choices merchants and their customers have.

What we collect from your store

• Store details: your shop domain and store name, and the access token Shopify issues so the app can work.
• The offers you configure and the products and collections they apply to.
• Catalogue data needed to run offers: product, variant and collection IDs, titles, SKUs, prices and stock levels. To keep offers up to date, the app receives Shopify's product, collection and inventory update webhooks and keeps a log of them.

Storefront requests

The offer widget on your storefront asks the app which offer the shopper's cart qualifies for. Each request carries only the product IDs and quantities in the cart and the product being viewed, plus the standard parameters Shopify adds to app proxy requests (such as the shop domain and, if the shopper is logged in, their customer ID). We use this only to calculate the offer and do not store it.

What we do not collect

We do not collect or store customer names, email addresses, phone numbers, postal addresses, orders or payment information. Discounts are calculated at checkout by Shopify Functions running on Shopify's own infrastructure.

What we write to your store

To make an offer work, the app writes a metafield to each qualifying product marking it as eligible, and stores the offer terms on an automatic discount in your store. Deleting an offer removes those markers. Uninstalling the app leaves your products unchanged apart from these markers, which stop having any effect once the app is gone.

How we use information

Only to provide the app: to authenticate your store, build and apply your offers, show offer progress on your storefront, apply plan limits and provide support when you contact us. We do not sell data, use it for advertising, or build profiles of your customers.

Sharing and service providers

We do not share your data with third parties, except with the service providers needed to run the app: Shopify (the platform the app is built on) and Hostinger (our hosting provider). Data is stored on our dedicated server in Mumbai, India. We may disclose information if required by law.

Security

All traffic to the app is encrypted with HTTPS. The database is not reachable from the internet, server access is restricted to authorised personnel using key-based authentication, and Shopify webhooks and app proxy requests are signature-verified before they are processed.

Data retention and deletion

Offer configuration is kept for as long as the app is installed. When you uninstall, your login sessions are removed immediately, and all stored data for your shop is permanently deleted when Shopify sends its mandatory shop/redact request, 48 hours after uninstall. Nightly database backups, stored on the same access-restricted server, are kept for 14 days, so deleted data is fully removed from backups within 14 days.

Your rights and privacy-law requests

The app supports Shopify's mandatory privacy webhooks. Because we hold no customer personal data, a customers/data_request or customers/redact request has nothing to return or erase; we record it and confirm. shop/redact deletes all data for the store. Merchants can also access, correct or delete their data at any time by contacting us.

Billing

Subscriptions are billed through Shopify. We never see or store your payment card or bank details.

Children

The app is intended for businesses and is not directed at children.

Changes to this policy

We may update this policy when the app or the law changes. The date at the top shows when it was last updated.

Contact

For privacy questions or data requests, contact LunarCode at info@lunarcode.cloud.