Privacy Policy

Last updated: May 20, 2026

This Privacy Policy describes how Ascend Bundles ("we", "us", or "our") collects, uses, and protects information when you install and use our Shopify application.

1. Information We Collect

We collect only the minimum information required to operate the app:

Shop domain — your myshopify.com domain, used to identify your store and maintain your session.
OAuth access token — a Shopify-issued token that allows the app to read and write products, discounts and cart transforms on your behalf. Stored securely in our database.
Bundle configuration — the bundle offers, tiers, discounts and display settings you create, stored in Shopify metafields on your store and in our database.
Product and order data — accessed at runtime only to calculate and apply bundle discounts correctly. We do not store your product catalog or customer order details.
Session data — short-lived session identifiers used to keep you authenticated inside the Shopify admin.

We do not collect personally identifiable information about your customers.

2. How We Use Your Information

The information we collect is used exclusively to:

Authenticate your store with the Shopify API.
Create and manage your bundle offers and the associated discounts.
Calculate the correct bundle pricing at checkout via Shopify Functions.
Maintain your session so you remain logged in to the app.

We do not use your data for analytics, advertising, or any purpose other than providing the app's core functionality.

3. Data Storage and Security

Session tokens, shop domain and bundle configuration are stored in a secured database hosted on infrastructure with industry-standard encryption at rest and in transit (TLS). Access to the database is restricted to application services only.

We retain data only for as long as your app installation is active. When you uninstall the app, all associated data is automatically deleted.

4. Data Sharing

We do not sell, rent, trade, or otherwise transfer your information to third parties. We do not share data with advertisers or analytics providers.

We may disclose information if required by law or to protect our legal rights, but we will notify you when possible.

5. Third-Party Services

The app is built on the Shopify API and operates within the Shopify ecosystem. Your store data is subject to Shopify's Privacy Policy in addition to this policy.

6. Your Rights (GDPR & CCPA)

You have the right to:

Request a copy of the data we hold about your store.
Request deletion of your store's data at any time.
Uninstall the app at any time, which triggers immediate deletion of all associated data.

To exercise any of these rights, contact us at the email address below. We will respond within 30 days.

7. Cookies

The app does not set tracking cookies on your storefront. Inside the Shopify admin, Shopify's own session cookies may be present as part of the embedded app infrastructure.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the Shopify app listing or by email. Continued use of the app after changes constitutes acceptance of the updated policy.

9. Contact

If you have questions or concerns about this Privacy Policy, please contact us at: scandicwellness.store@outlook.com