P Presto Labs
Legal

Privacy Policy

Presto Bundles, operated by Presto Labs · Last updated 14 July 2026

This Privacy Policy explains how Presto Labs ("we", "us") handles data in connection with the Presto Bundles application ("the App") for Shopify. It covers data belonging to the merchants who install the App and to the shoppers who visit those merchants' stores. We built the App to collect the minimum data needed to do its job, and we do not sell data to anyone.

1. What we collect

When a merchant installs the App, we access and store only the following:

Merchant & store data

  • Store identity - your myshopify.com domain and the access token Shopify issues on install, used to authenticate API requests.
  • Bundle configuration - the bundles, steps, products, rules, discounts and styling you create in the App. This is your own settings data.
  • Product and collection data - read from your store through Shopify's Admin API so the App can display your products inside a bundle.

Storefront & order data

  • Anonymous analytics events - when a shopper interacts with a bundle, the App records events (such as bundle viewed, product selected, add to cart) keyed to a random, anonymous session identifier. These events contain product identifiers and event counts, not personal identities.
  • Order line-item data - when an order is paid, Shopify notifies the App via the orders/paid webhook. We read the order's line items to attribute the completed order to the bundle that produced it, so merchants can measure real conversions and revenue.

2. What we do not collect

The App does not collect or store customers' personal information - no names, email addresses, phone numbers, or shipping addresses. Our analytics are tied to an anonymous session identifier, and our order attribution uses line-item and pricing data only. We do not build shopper profiles and we do not track individuals across stores.

3. How we use data

  • To provide the App's core functionality - creating and rendering bundles, and applying the automatic discounts you configure.
  • To produce analytics for the merchant - views, carts and conversions attributed to each bundle.
  • To maintain, debug and secure the service.

We do not use this data for advertising, and we do not sell it.

4. Sharing and sub-processors

We do not sell or rent data. We share it only with the infrastructure providers required to run the App, acting as our sub-processors:

  • Shopify - the platform the App runs on; source of store, product and order data, and the processor of all billing.
  • Render - our application hosting and PostgreSQL database provider, where App data is stored.

We may also disclose data where required by law.

5. Retention and deletion

We keep data only as long as needed to provide the App. We honour Shopify's mandatory privacy webhooks:

  • App uninstall - your store session is removed when you uninstall the App.
  • shop/redact - 48 hours after uninstall, Shopify signals us to erase your store's data, and we delete your bundles, analytics events and remaining records.
  • customers/redact and customers/data_request - because we store no customer personal data, we have nothing to return or erase, and we confirm the request accordingly.

6. Security

Data is encrypted in transit using TLS/HTTPS and encrypted at rest by our database provider. Access to production systems is limited to the developers who operate the App. No method of transmission or storage is perfectly secure, but we take reasonable measures to protect your data.

7. Your rights

Depending on your location, you or your customers may have rights to access, correct, or delete personal data. Because the App holds no customer personal data, most such requests are satisfied automatically through Shopify's redaction webhooks above. Merchants can remove all of their own data at any time by uninstalling the App. For any other request, contact us using the details below.

8. Changes & contact

We may update this policy as the App evolves; material changes will be reflected by the "Last updated" date above. Questions or requests can be sent to: