Privacy policy

Who is responsible

Bundle Reveal is operated by 2SMART4YOU, a French SASU registered under SIRET 999 276 835 00017, at 16 rue de la Treille, 13170 Les Pennes-Mirabeau, France. Privacy requests can be sent to admin@2smart4you.fr.

Data processed

• Shopify shop domain, OAuth credentials and app-session metadata required to install, authenticate and operate the app.
• Product, variant and fixed-bundle component data requested from Shopify when a storefront product page loads. This catalogue data is returned to the storefront and is not stored by Bundle Reveal.
• Subscription status supplied by Shopify Billing to decide whether the storefront block may be served.
• Support messages and limited technical logs needed to secure and troubleshoot the service.
• Visits to the Bundle Reveal listing in the Shopify App Store, clicks on the install button and completed installations. Shopify sends these events to our Google Analytics 4 property. Depending on the event, this can include the referring App Store surface, shop identifier, shop name and shop URL.

Bundle Reveal does not request or store customer, order, payment or checkout data and does not use merchant data for advertising or AI training.

Purposes and legal bases

App sessions, catalogue requests and subscription checks are processed to perform the merchant contract. Security logs are processed for the legitimate interest of protecting and maintaining the service. App Store listing analytics are processed for our legitimate interest in measuring discovery and installation of the app. Billing records are processed by Shopify under its own terms and legal obligations.

Retention and deletion

• App sessions are deleted when the app is uninstalled and again when Shopify sends its shop-redaction request.
• Bundle component responses are not persistently stored.
• Operational logs are retained for no more than 30 days unless a security incident requires longer preservation.
• Support correspondence is retained for up to three years after the last exchange.

Processors and transfers

Shopify provides installation, authentication, APIs and billing. OVH SAS, 2 rue Kellermann, 59100 Roubaix, France, hosts the application in the European Union. Google Ireland Limited provides analytics for the Shopify App Store listing. Where Shopify or Google processes data outside the European Economic Area, their published contractual and transfer safeguards apply.

Your rights

Depending on applicable law, you may request access, correction, deletion, restriction, objection or portability by emailing admin@2smart4you.fr. You may also lodge a complaint with the CNIL or your local data protection authority. Requests are answered within the legally applicable period.

Cookies

Bundle Reveal does not add advertising or analytics cookies to the merchant storefront or embedded app. The Shopify App Store is operated by Shopify and applies its own cookie and privacy controls. Listing events are sent to our Google Analytics property only through the tracking integration provided by Shopify.