Legal
Privacy Policy
This policy explains what information the Bento Bundle app ("Bento", "we", "us") collects when a merchant installs it on their Shopify store, why we collect it, and what we do with it. Bento is published by Tantallon Gate Ltd, a company registered in the United Kingdom (tantallongate.com).
Short version: Bento stores the bundle, bulk, and offer setups a merchant creates, plus summary figures about orders that use them. We do not store your customers' names, email addresses, shipping addresses, or payment details. We do not sell data or share it for advertising.
Who this policy is for
It covers two groups: the merchants who install Bento on their Shopify store, and the shoppers who visit a store running Bento. Shopify is the platform we operate on; Shopify's own privacy terms also apply.
Information we access from Shopify
With the merchant's permission, Bento uses the Shopify Admin API to read and write only what it needs to build and run promotions:
- Products, discounts, and metaobjects to create the bundles, bulk deals, and offers you configure, and to apply the discount you choose at checkout.
- Cart transforms and checkout validations to merge a bundle into a single cart line and keep hidden helper products from being bought on their own.
- Orders (read only) to record when an order used one of your bundles or offers, so we can show you performance figures.
- Inventory (read only) to read each product's "Cost per item", so the analytics can show profit as well as revenue.
- Themes (read only) to detect whether the storefront app embed is switched on, so we can tell you if an offer is live.
- Online Store publications to publish the hidden bundle container product so the storefront can display it.
Information we store
We keep the following in our own database:
- Store details: your store's domain, the access token that authorises the app, your plan, and billing status.
- Your promotions: the bundles, bulk deals, and offers you create, including their products, discounts, and settings.
- Order summaries: for orders that use a Bento promotion, we store the Shopify order reference, which promotion was used, the order value, currency, the discount amount, cost of goods (if available), the customer's country, and an anonymous session identifier. We do not store customer names, emails, addresses, or payment information.
- Storefront analytics: anonymous events such as a bundle being viewed, opened, or added to cart, tied to a randomly generated session identifier (not a person) and a product reference. These power the funnel and A/B test results shown to the merchant.
What we do not do
- We do not store or process customer personal details (name, email, address, phone, or payment data).
- We do not sell or rent any data.
- We do not share data with advertising or marketing networks.
- We do not use the data to build cross-store profiles of shoppers.
Where data is held and who processes it
Bento runs on Railway (application hosting) with a PostgreSQL database, hosted in the United States. Our only other data processor is Shopify, the source of the store and order data. If you are in the UK, EU, or elsewhere, your data may be transferred to and stored in the United States under appropriate safeguards.
How long we keep it
Promotion and store data is kept for as long as the app is installed. When a store owner uninstalls Bento or asks us to delete their data, we remove it in line with Shopify's mandatory data-deletion webhooks, which Bento implements:
- customers/redact and customers/data_request: handled when Shopify forwards a shopper's request.
- shop/redact: your store's data is deleted after a store uninstalls, on Shopify's schedule (currently 48 hours after uninstall).
Your rights
Depending on where you live, you may have rights to access, correct, or delete personal data, under the UK GDPR, EU GDPR, or laws such as the CCPA. Because shopper requests flow through the store you bought from, the quickest route is to contact that store, which can pass the request to Shopify and to us. You can also contact us directly at the address below and we will respond.
Security
Data is encrypted in transit. Access tokens and store credentials are held securely and used only to operate the app for your store. Access to the production database is restricted to the app and its maintainers.
Changes to this policy
If we change how we handle data, we will update this page and the date at the top. Continued use of the app after a change means you accept the updated policy.
Contact
Questions about privacy or a data request: email support@bentobundle.com. Bento Bundle is operated by Tantallon Gate Ltd, United Kingdom.