Legal
Privacy policy — Bundles
Last updated: 11 October 2026
This policy describes what the Datima Bundles app ("the app"), made by Datima.ai ("we"), stores when a merchant installs it on a Shopify store, and what happens to that data afterwards. Write to support@datima.ai about anything on this page.
What the app does
The app lets a merchant create two kinds of offer, quantity breaks and bought-together sets, shows them on the product page through a theme app embed, and applies the discount at checkout through an automatic discount run by the app's discount function. It reads the store's recent orders, in aggregate, to suggest offers and to show what the offers bring in.
What we hold, and why
| Data | Where it comes from | Why we hold it | Who sees it |
|---|---|---|---|
| Your store's domain and the scopes you granted | Shopify, at install | To run the app for your store | Us |
| An access token for your store | Shopify, at install | So the app can read your products and orders and write its offers where your theme and checkout read them | Nobody; it is stored and never shown |
| The staff account that opened the app, if Shopify sends it: its id, name, email, locale and whether it owns the store | Shopify, when a staff member opens the app | Shopify's app session library stores it to keep the admin session; the app does not use it | Us |
| Your offers: each offer's name, type, tiers or set, discount, widget layout, heading, start and end dates, status, and the id and title of the automatic discount the app created for it | What you set in the app | To show the offer on the product page and apply it at checkout | You, and your shoppers on your storefront |
| Suggestions: for each suggestion its kind (bought together or slow mover), the product ids involved and the counts behind it (how often the products were bought together, how many sold), and whether you dismissed it | The order scan | To list suggestions and never suggest a dismissed one again | You |
| The order scan's record: when it ran, how many orders it read, whether it finished | The app | To show the scan's status and run the next one | You |
| Metrics for your store and for each offer: over the last 30 days and the 30 before, the revenue, order count and discount given on orders that carried the app's discounts, the number of all orders, and the average subtotal of orders without an offer | The order scan | To show the Home tiles and each offer's orders and revenue | You |
| Your votes for upcoming offer types | What you click in the app | To decide what to build next | Us |
The order scan reads your orders through Shopify's bulk export: for each order of the last 60 days, its date, subtotal, discount applications and line items (product, quantity, discounted total). It keeps only the counts and totals listed above. No order and no customer field is stored: no name, email address, phone number, address or order id.
What the app writes to your store
To apply a discount at checkout, the app creates one automatic discount per offer in your store and stores the offer's configuration on that discount in the app's own namespace. To show an offer on the product page without a request to the app, the app writes one app-owned field on each product in the offer. Both belong to the app and are removed by Shopify with the app.
Shoppers never reach the app
A product page draws its tiers or set from the field stored on the product itself; the shopper's browser never contacts the app. The discount is computed inside Shopify's checkout by the app's discount function, which receives the cart and returns the discount and nothing else; the function has no network access and stores nothing. The app receives nothing about a shopper, a cart or an order at the time it happens. The app does not request access to customer data: no name, address, email address or phone number. It requests access to orders only for the aggregate scan described above.
Where it is held
The app runs on Amazon Web Services in the United States. Data is encrypted in transit and at rest. Every store's rows are keyed by the store's domain and never returned to another store.
How long
- For the life of the install. When you uninstall (Shopify's app/uninstalled webhook) the app removes its session for your store and stops processing it at once. Your offers, suggestions and metrics are kept so a reinstall restores them.
- About 48 hours after an uninstall Shopify sends shop/redact, and every row of your store is deleted: offers, suggestions, the scan record, metrics, votes and sessions.
- When Shopify sends customers/redact or customers/data_request for a customer, the app answers that it holds no customer data, because it never stored any.
Sub-processors
- Amazon Web Services — hosting and the database.
- Shopify — the source of your products and orders, and the store that holds the discounts and product fields your checkout and storefront read.
Nobody else receives your store's data.
What we do not do
We do not sell, rent or share data with anyone for their own purposes. We run no advertising and no analytics on your store's data. We do not use your data to train models, to profile your customers, or to advise other merchants. We do not read more of your store than the app's declared Shopify scopes allow: products, discounts and orders.
Your rights
You can see and change everything the app holds for your store from inside the app, and delete it by uninstalling. If you are a customer of a store that uses the app, contact the store: the app holds nothing about you.
Website analytics
The website (datima.ai) uses Google Analytics to understand how visitors find and use the site, with cookies set by Google only after you accept the cookie banner. That is the website, not the app: the app sets no cookies and runs no analytics on your store.
Changes
We will post changes to this page and update the date at the top.
Contact
support@datima.ai — Datima.ai.