Privacy Policy

Last updated: July 7, 2026

This Privacy Policy describes how the Mix Bundle app ("the App", "we", "us") operated by Meltinbit collects, uses, and protects information when a Shopify merchant installs and uses the App. By installing or using the App you agree to the practices described below.

1. What the App does

Mix Bundle lets merchants create customizable product bundles on their Shopify store (for example "pick 6 items" or "fill a 500g box"). Bundle configurations are stored as metafields on the merchant's own products within their Shopify store.

2. Information we access and store

The App is designed to store as little data as possible. Specifically:

• Store session data — the shop domain and the OAuth access token issued by Shopify, used to authenticate API requests on behalf of the merchant.
• Subscription / billing status — the shop domain, the plan name, and whether the subscription or trial is active, used to manage access to paid features.
• Bundle configurations — settings such as bundle capacity, weight limits, allowed products, and pricing/discount rules. These are stored as metafields on the merchant's products inside their own Shopify store, not on a separate customer database.

We do not collect or store personal data about your store's customers. The App does not maintain its own database of buyer names, emails, addresses, payment details, or order history. Any customer and order information remains within the merchant's Shopify account and is handled by Shopify under Shopify's own privacy terms.

3. How we use the information

The information above is used solely to:

• Authenticate and operate the App within the merchant's store.
• Provide and display bundle functionality on the storefront.
• Manage subscriptions, trials, and access to features.
• Provide support and keep the App working correctly.

We do not sell, rent, or share this information with third parties for marketing purposes.

4. Data processing and sharing

The App runs on hosting and infrastructure providers used to operate the service. Data may be processed by these providers strictly for the purpose of running the App. All access to the merchant's store is performed through Shopify's official APIs and is governed by the permissions (scopes) the merchant grants at installation.

5. Data retention and deletion

We retain store session and subscription data only for as long as the App is installed. When a merchant uninstalls the App, the associated session is removed. The App also supports Shopify's mandatory GDPR webhooks (customers/data_request, customers/redact, and shop/redact); because the App does not store customer personal data, customer data requests and redaction requests contain no App-specific customer records to return or delete. Bundle configurations stored as metafields belong to the merchant and can be removed by the merchant at any time.

6. Security

We take reasonable technical and organizational measures to protect the information we handle, including secure transmission over HTTPS and restricted access to stored session tokens. No method of transmission or storage is completely secure, but we work to protect your information against unauthorized access.

7. Your rights

Depending on your location, you may have rights to access, correct, or request deletion of the limited data we hold about your store. Because the App does not store customer personal data, such requests generally relate to the merchant's own store session and subscription records. To exercise these rights, contact us using the details below.

8. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Continued use of the App after changes take effect constitutes acceptance of the updated policy.

9. Contact us

If you have any questions about this Privacy Policy or how your data is handled, contact us at mixbundle@meltinbit.com.