Privacy policy

Who this is

FuzeBundle (“the app”) is operated by Fuzesoft Inc. (“we”). It is installed by a Shopify merchant on their own store, and it runs both inside the Shopify admin and on the storefront of that store.

Two kinds of people are described below and the distinction matters throughout: the merchant, who installs and uses the app, and the shopper, who visits the merchant’s storefront and may buy a bundle. In data-protection terms the merchant is the controller of their store’s data and we are a processor acting on their instructions.

What the app stores

All of it, with nothing omitted. Each entry below is a table in our database, and the list is kept in step with the schema itself.

About the merchant

Store and staff account

The store’s .myshopify.com domain, and — for the staff member who opens the app — their name, email address, locale and whether they own the account. Alongside it, the access token Shopify issues so the app can call the Shopify API on the store’s behalf. This is what keeps a merchant logged in; it is supplied by Shopify at install, not collected from a form.

Subscription state

Whether the store is a Shopify development store, the name of its Shopify plan, and the id, name, trial end and renewal date of its FuzeBundle subscription. We never see or store a card number: billing is handled entirely by Shopify, and we are told only whether a subscription is active.

Bundles the merchant builds

The offer itself: its name and wording, the products and collections it applies to, the discount and its tiers, and the colours, fonts and layout chosen for the card. Product titles, prices and images are copied from the store so the app can draw the offer without querying Shopify on every page view.

Display preference

Which date range the merchant last looked at on their dashboard, so returning to it does not reset the view.

About orders

When an order is paid, Shopify notifies the app so it can tell the merchant what their bundles earned. From that notification the app keeps:

Order and refund records

The order’s Shopify id and its number (“#1001”), the store’s currency, the ids of the order lines the bundle was credited with, the number of units, and three money totals in cents: full price, discount given, and amount paid. Refunds are recorded the same way, so a returned order stops counting as revenue.

The order notification Shopify sends contains the shopper’s name, email, phone and addresses. The app reads the line items and the money, and discards the rest without writing it anywhere.

What the app does not store

The app holds no personal data about shoppers. Specifically, none of the following is requested, kept, or logged:

• A shopper’s name, email address, phone number or address
• A shopper’s Shopify customer id or account
• Payment details of any kind, for anyone
• Browsing, tracking or analytics data — the storefront card sets no cookie, writes nothing to the browser, and does not report that it was seen

This is a structural claim, not a policy one: there is no field anywhere in the app’s database for a shopper to be stored in. It is why a customer data request answered by this app returns nothing — see Shopper requests below.

What the app asks Shopify for

A merchant approves these permissions at install. Each is used for one thing:

• read_products — to list products and collections when the merchant is building a bundle, and to show their prices and images on the card.
• read_discounts, write_discounts — to create and suspend the automatic discount that applies the offer at checkout. The app creates only its own discounts.
• read_orders — to attribute paid orders and refunds to the bundle that earned them, as described above.
• read_themes — read-only, and used for one thing: to check whether the merchant has added the FuzeBundle block to their product template, so the app can say so when they have not. The app never writes to a theme.

Where it is kept, and who else sees it

The app and its PostgreSQL database run on Hetzner (Falkenstein, Germany). Data is encrypted in transit, and access to the database is limited to the application itself and to the people who operate it.

We do not sell any data, and we do not share it with third parties for their own purposes. There is no advertising network, analytics provider or tracking script in the app or in the storefront card. The only party the app exchanges data with is Shopify.

How long it is kept, and how it is erased

Data is kept while the app is installed, because it is what the app is made of: delete a merchant’s bundles and they have no offers.

When a merchant uninstalls the app, their access token and session are deleted immediately. Shopify then sends a shop erasure request 48 hours later, and on receiving it the app deletes everything else it holds for that store — every bundle, every order and refund record, the display preference and the subscription state — leaving no row anywhere that names the store.

A merchant who wants their data erased sooner can ask at support@apptello.com, and we will carry out the same erasure on request.

Shopper requests

A shopper who asks a store what a given app holds about them has that request forwarded to us by Shopify. Because the app stores no shopper personal data, the answer is that we hold none, and we tell the merchant so within Shopify’s 30-day window. A shopper erasure request is likewise recorded and answered: there is nothing to delete.

Shoppers with a question about what a store holds about them should contact that store, which is the controller of its own customer data.

Your rights

Depending on where a merchant is established, they may have the right to access, correct, export or erase the personal data we hold about them, to object to or restrict its processing, and to complain to a supervisory authority. The data in question is the merchant account data listed above; write to support@apptello.com and we will answer within 30 days.

Changes to this policy

If what the app stores changes, this page changes with it and the date above moves. Where a change materially affects what we hold or what we do with it, we will tell merchants inside the app before it takes effect rather than relying on this page being re-read.

Contact

Fuzesoft Inc. · support@apptello.com