Effective Date: 2025-12-16

Introduction

This Privacy Policy describes how Bundle (“we,” “our,” or “us”) collects, uses, and shares your personal information when you use our website at https://www.bundleapp.org and related services.

This privacy policy was generated using an automated tool and provides general information. It does not constitute legal advice. Laws vary by jurisdiction and change over time. You should consult qualified legal counsel to ensure compliance with applicable laws.

Controller Information

Company: Bundle
Legal Entity: LLC
Jurisdiction: California
Address: 2108 N STE N, Sacramento, California 95816
Email: [email protected]

Data We Collect

• Personal identifiers such as names, usernames, and account IDs
• Authentication data (stored in hashed or encrypted form)
• Contact details including email, phone number, and address
• Payment information processed via third-party providers

How We Collect Data

We collect personal information directly from you, automatically through your use of our services, and via trusted third-party platforms.

How We Use Data

• To operate, maintain, and improve our services
• To analyze usage patterns and performance
• To communicate with users and provide support
• To process transactions and prevent fraud

Third-Party Services

We may share information with the following providers:

• Google Analytics – website analytics
• LinkedIn Insight Tag – marketing & advertising
• Stripe – payment processing
• Shopify – e-commerce operations
• Twilio – SMS & communication services
• Firebase Authentication – user authentication
• Google Forms – forms & surveys
• AWS – hosting & infrastructure
• Cloudinary – media storage
• Datadog – monitoring & logging
• Calendly – scheduling services
• Google Maps – location services

E-Commerce Data

For purchases made through our platform, we may process:

• Order and purchase history
• Billing and shipping addresses
• Payment details (handled securely by processors)
• Customer service communications
• Fraud prevention and security data

Privacy Rights (California)

California residents have rights under CCPA/CPRA to access, delete, correct, and opt out of the sale or sharing of personal information. We do not discriminate for exercising these rights.

Data Retention

• Account data: 3 years after closure
• Transaction records: 7 years (tax purposes)
• Marketing data: until consent is withdrawn
• Log data: 12 months for security

Data Security

We use industry-standard safeguards including AES-256 encryption for stored data and TLS 1.3 for data in transit. Access is restricted using multi-factor authentication and role-based permissions.

Children’s Privacy

We do not knowingly collect personal information from children under 18. If such data is discovered, it will be deleted promptly.

Do Not Track

Our website does not respond to Do Not Track signals. You may manage tracking preferences through your browser settings.

Marketing Communications

You may opt out of marketing communications at any time by:

• Using the unsubscribe link in emails
• Contacting us directly
• Updating your account preferences

Third-Party Links

We are not responsible for the privacy practices of external websites. Please review their privacy policies before submitting personal data.

Policy Updates

This Privacy Policy may be updated periodically. Material changes will be communicated through appropriate channels.

Contact Us

If you have questions or wish to exercise your rights, contact us at:

Email: [email protected]
Address: 2108 N STE N, Sacramento, California 95816