Privacy Policy, Legal Terms & GDPR Compliance
Last updated: October 2026. Complete legal terms, GDPR/CCPA merchant commitments, mandatory webhook specifications, and our Clean Theme guarantee.
Privacy Policy
This Privacy Policy describes how Combo Bundles by Nextvance ('we', 'us', or 'our') collects, uses, and protects information when you install and utilize our application on your Shopify store. We are strictly committed to complying with GDPR (General Data Protection Regulation), CCPA (California Consumer Privacy Act), and Shopify App Store data protection guidelines.
1. Information We Access & Collect
To provide bundle calculations, tiered volume pricing, and component inventory deductions, Combo Bundles accesses the minimum necessary merchant and catalog data:
- Store Profile Data: Store name, shop domain (.myshopify.com), primary merchant contact email, currency code, and timezone.
- Product & Catalog Data: Product titles, variant IDs, SKUs, barcode numbers, catalog pricing, and media URLs required to render bundle components on storefronts.
- Cart & Order Information: Temporary cart line items, bundle configuration IDs, and order details necessary to compute bundle discounts and execute component-level stock deductions.
2. How We Use Merchant & Store Data
- To render responsive bundle widgets, quantity breaks, and mix-and-match builders on your Online Store 2.0 theme.
- To accurately deduct individual component SKUs in real time when bundle checkouts occur.
- To calculate aggregated analytics (views, add-to-carts, conversion rate, attributed bundle revenue) displayed on your merchant dashboard.
- To provide automated inventory notifications (low-stock component email alerts) and 24/7 technical support.
3. Data Security, Storage & Zero-Selling Pledge
We strictly pledge that we never sell, rent, monetize, or share merchant or customer personal data with third-party advertisers or data brokers. All communication between Shopify, our application infrastructure, and the merchant's browser is protected by TLS 1.3 encryption. Data at rest is encrypted using AES-256 standards.
4. Merchant Rights & Data Protection Contact
Merchants and their customers have the full legal right to request access, correction, export, or total deletion of any stored data. For privacy inquiries or to reach our designated Data Protection Officer (DPO), please email us at privacy@nextvance.com or submit a ticket through our Contact Support page.