Who we are
BundlePilot is made by Boldnsmart (boldnsmart.com), based in Lithuania, which acts as the data controller for the data described here. Lithuania is in the European Union, so the GDPR applies. Contact: [email protected].
This website
bundlepilotapp.com counts page visits with PostHog, using its EU servers. It is set up the same way as our other app sites: no cookies and no local storage (memory only), no personal profiles, no session recordings, and no automatic capture of clicks or typing. We see how many times each page was viewed, where visits came from, how many times an install button or the offer email link was clicked, and from which part of the page.
The site has no forms, no ads and no tracking pixels, and sets no cookies. The bundle builder demo on the How it works page runs only in your browser; nothing you type into it is sent anywhere.
The site is served by Cloudflare Pages. Like any website host, it receives your IP address and browser details when a page loads.
Links to the Shopify App Store take you to Shopify, where Shopify’s own privacy policy applies.
The BundlePilot app
The app has its own full privacy policy at bundlepilot-production.up.railway.app/privacy. In short:
- What it stores: your bundles and their settings, and for orders that contain a bundle, the picks in each slot, surcharges and order totals, which power your Analytics and set your plan’s bundle-sales count.
- Shopper data: the only thing a shopper writes that the app keeps is the optional gift message.
- Gift messages are erased automatically 12 months after the order.
- Where: a PostgreSQL database hosted by Neon in the United States (Oregon), and the app runs on Railway in the United States. The transfer from the EU is covered by Neon’s and Railway’s certifications under the EU-U.S. Data Privacy Framework.
- Uninstalling: when you uninstall, Shopify sends us a request to delete your store’s data, and the app is built to delete it when that request arrives. Email us if you want a deletion confirmed.
Your rights
If you are in the EEA or UK you can ask to access, correct, export, restrict or erase your personal data, and object to its processing. Email [email protected].
Changes
If this policy changes in a meaningful way, we will update the date at the top of this page.