Privacy Policy

Overview

AFN Bundles & Subscriptions ("the App") is a Shopify app developed by AFN Digital that lets merchants sell product bundles, subscription plans, and Subscribe & Save offers from one native app. This policy explains exactly what data we process, how we use it, and how we protect it.

What Data We Collect

• Store information - your store domain and installation status, collected during Shopify OAuth to identify your store and operate the app.
• Shopify session data - API access tokens and the staff name/email Shopify attaches to admin sessions, required for API access and session management. Stored securely in our database.
• Store configuration - the content you create in the app: offers, bundles, subscription plan settings, dunning policies, email notification settings, and publishing state.
• App billing plan - your app subscription with us (Starter/Growth) as reported by Shopify, used to enforce plan features.
• Subscription contract records - for each customer subscription created through the app: the contract's status, line items, pricing, billing schedule, and an opaque Shopify customer identifier that links the contract to its owner. We store no customer name, email address, postal address, or phone number.
• Anonymous storefront analytics - when a shopper views or interacts with the app's widget (widget viewed, option selected, add to cart), we record the event type, a random session identifier, device category (desktop/mobile/tablet), and the offer involved. No customer personally identifiable information (PII) is collected - no names, emails, IP addresses, or user-agent strings.
• Support requests - name, email, category, subject, message, and your current plan, submitted voluntarily by the merchant when contacting support.
• Shopify metafields - the App writes your published offer configuration to your store's product metafields. This data is stored on Shopify's infrastructure and is owned by you.

Customer Data We Process on Behalf of Merchants

• Stored - an opaque Shopify customer identifier attached to each subscription contract, so customers can manage their own subscriptions and merchants can see whose subscription is whose.
• Used transiently, never stored - a customer's name and email address, read from Shopify at the moment we send a transactional subscription email (e.g. a welcome email or a payment-failure notice) and discarded after sending. Email addresses are never written to logs or our database.
• Not processed at all - phone numbers, payment card details (payments are handled entirely by Shopify), and passwords (sign-in uses Shopify Customer Accounts).

Customer data is used solely to operate subscriptions: contract management, recurring billing coordination, failed-payment recovery (dunning), the customer self-service portal, and the merchant dashboard. We do not use personal data for marketing, advertising, profiling, or automated decision-making with legal effects, and we never sell or share it.

What We Do NOT Collect

• Customer names, emails, addresses, phone numbers, or payment information in our database
• Browsing history outside the product pages where the widget runs
• Cookies on the storefront (the widget uses only a temporary, random session-storage identifier for anonymous analytics)
• IP addresses or user-agent strings in our database

Sub-processors

Infrastructure only: Fly.io (application hosting), Neon (encrypted PostgreSQL database), and Resend (transactional email delivery for subscription notifications and support messages). No analytics or advertising processors receive personal data.

How We Store Your Data

All data is stored in a secure PostgreSQL database, encrypted at rest. All data transmission uses TLS/SSL encryption. Production credentials are held in the hosting provider's secret store, never in code. Every action on a customer's subscription is recorded in an audit log (who did what, when). Access to production systems is limited to AFN Digital's operator accounts protected by two-factor authentication.

Data Retention and GDPR

Customer identifiers are kept only as long as the subscription data they describe. Anonymous analytics events are retained for the duration of your installation. We honor Shopify's GDPR webhooks automatically: a customer-redaction request deletes that customer's identifiers from our records; a customer data request is answerable from Shopify's own records (we hold no additional personal fields); and when a store uninstalls the app, all of its data - configuration, contracts, analytics, and sessions - is deleted after Shopify's 48-hour redaction window. No manual request is needed.

Contact

Privacy questions or requests:

• Email: afndigitalph@gmail.com
• Website: afndigital.com