1. Who we are
Bondi ("we", "us") is a Shopify application that lets merchants create product bundles, volume discounts, and BOGO offers, with associated analytics. This policy explains what data the app processes when a merchant installs it and when shoppers interact with a merchant's storefront.
Bondi acts as a data processor on behalf of the merchant (the data controller) for shopper data, and as a data controller for merchant account data.
2. What data we collect
| Category | Examples | Source |
|---|---|---|
| Store data | Store domain, store name, plan, contact email | Shopify OAuth on install |
| Product data | Product titles, images, prices, variants used in bundles | Shopify Admin API (read_products) |
| Order data | Order line items, totals, discounts applied, refunds | Shopify webhooks (orders/create, orders/cancelled, refunds/create) |
| Storefront events | Bundle page views, builder interactions, add-to-cart events | Shopify Web Pixel (product_viewed, product_added_to_cart) |
What we do NOT collect: shopper names, shipping or billing addresses, payment details, or phone numbers. Storefront events are used in aggregate for bundle analytics, not to build shopper profiles.
3. How we use it
- Run the product — create and apply bundle discounts at checkout, render bundle pages and widgets.
- Analytics — compute per-bundle funnels (views → builds → add-to-cart → purchases) and revenue attribution, including refund reversals.
- AI bundle suggestions — analyse the merchant's own order history to propose bundles (see §4).
- Billing — manage plans and trials via the Shopify Billing API.
- Support — respond to merchant enquiries.
We do not sell data. We do not use one merchant's data to benefit another merchant.
4. AI processing
The AI suggestions feature sends aggregated order-pattern data from your own store (which products are bought together, at what frequency and value) to Anthropic's Claude API to generate bundle proposals. Specifics:
- Data sent is limited to product titles and aggregated co-purchase statistics — no shopper personal data is included.
- Suggestions are generated per-store; your data is never pooled with other merchants'.
- Anthropic's API does not train models on API data by default.
5. Who we share data with
| Processor | Purpose |
|---|---|
| Shopify | Platform — all app data flows through Shopify's APIs |
| Anthropic | AI bundle suggestions (aggregated, non-personal data only) |
| Hosting provider | Application and database hosting |
No advertising networks, no data brokers, no analytics resellers.
6. Data retention & deletion
- While installed: we retain bundle configurations, event data, and order-derived analytics to power the dashboard.
- On uninstall: the store is marked inactive immediately. Store data is retained for a short grace period in case of reinstall, then deleted.
- On deletion request: we honour Shopify's mandatory GDPR webhooks (see §7) and delete without undue delay.
7. GDPR & merchant rights
Bondi implements all three of Shopify's mandatory compliance webhooks:
- customers/data_request — we provide any shopper data we hold for the requested customer (typically none, given §2).
- customers/redact — we delete any shopper-associated event data for the requested customer.
- shop/redact — after uninstall, we delete the store's data when Shopify issues the redaction request.
Merchants in the EU/EEA, UK, and similar jurisdictions may also contact us directly to exercise access, rectification, or erasure rights (§10).
8. Security
- All traffic between shopper, Shopify, and Bondi is encrypted in transit (TLS).
- App proxy endpoints and webhooks are HMAC-verified — requests that don't carry a valid Shopify signature are rejected.
- Access tokens are stored server-side and never exposed to the browser.
- Access scopes are deliberately minimised — we request only the eight scopes the app needs, each with a written justification on file with Shopify.
9. Changes to this policy
We may update this policy as the product evolves. Material changes will be announced in-app and the "Last updated" date above will change. Continued use of the app after changes constitutes acceptance.
10. Contact
Questions, concerns, or data requests: [email protected] — or use the contact form. We respond to privacy requests within 30 days, usually much faster.