Privacy, plainly stated.

Our Shopify apps

This section covers the apps we publish on the Shopify App Store — currently TB Dynamic Pricing and TB Bundles. When you install one, the merchant operating the store is our customer, and the store’s data is processed on that merchant’s behalf.

What the apps access

Each app requests only the Shopify permissions it needs, and you can see the full list on the install screen before you approve it.

• TB Dynamic Pricing — products and variants, prices, inventory levels and cost per item, order contents (to count units sold), markets, locales, locations, and your theme (only to check whether its storefront block is installed). It stores product titles, SKUs, vendors, prices, costs, stock levels, units-sold counts, and a dated history of every price change it observes.
• TB Bundles — products, metaobjects, discounts, cart transforms, publications, themes, markets, and customer events. Bundle configuration is stored in your own Shopify metaobjects. Its analytics store shop-scoped event records: the event type, which bundle, cart and checkout tokens, order id, currency, value, and quantity.

What the apps do not collect

Neither app collects your customers’ names, email addresses, shipping or billing addresses, phone numbers, payment details, or browsing identity. TB Dynamic Pricing requests no customer permissions at all. TB Bundles records cart and checkout tokens so an order can be matched back to the bundle it came from; these are Shopify-generated identifiers, not personal details, and are not used to profile or identify individual shoppers.

How long it is kept, and how it is deleted

App data is retained while the app is installed, because it is what the app runs on — TB Dynamic Pricing’s price history in particular cannot be rebuilt, as Shopify does not expose prices from before an app was installed. TB Dynamic Pricing keeps price history for about 15 months (longer if you set a longer reference window), and its record of price changes and price-rule checks for two years, as evidence of the prices you advertised.

Both apps implement Shopify’s mandatory privacy webhooks. When you uninstall, Shopify sends a shop erasure request 48 hours later and the app deletes that store’s records. Customer data requests and customer erasure requests are acknowledged with nothing to return, because no customer personal data is held. You can also ask us to delete your data at any time by emailing us.

Who else processes it

• Shopify — the platform the apps run on and the source of the data.
• Fly.io — hosting. TB Dynamic Pricing runs in Amsterdam, in the EU. TB Bundles runs in Newark, in the United States.
• Tigris — encrypted backups of TB Dynamic Pricing’s database, run by Fly.io, kept for a month so the price history survives a hardware failure.
• Loops — transactional email, used only to send you notifications about your own store, such as a weekly summary you can switch on or an alert when something needs you. It keeps a contact record with your email address, store name, country, plan and a few facts about how you use each app.
• Slack — internal notifications to our team when a store installs, uninstalls or changes plan, or when something fails. These include the store’s domain and name, its plan and country, and the store owner’s email address.

When a store’s data is erased, its records in the apps are deleted. The email contact in Loops and past Slack messages are kept until you ask us to remove them; email us and we will.

We do not sell app data, share it with advertisers, or use one merchant’s data to serve another. It is not used to train machine-learning models.

Billing

App subscriptions are billed by Shopify, not by us. We never see or store your card details.