Privacy Policy

Redjam Bundles — last updated 15 August 2026

This policy explains what data Redjam Bundles (“the App”) processes when a merchant installs it on their Shopify store, why it does so, and how long it keeps that data.

Data controller

Brahim Ouass, sole trader operating under the business name “OA Digital”.
3 boulevard de la Savine, bâtiment Proue, 13015 Marseille, France.
SIREN 889 803 060 — Marseille Trade and Companies Register.
Contact: contact@oa-digital.fr

What the App processes

The App collects no personal data about store customers. It does not read orders, customer accounts, or payment information.

Data	Purpose
Store domain (`example.myshopify.com`)	Identify the store and attach its configuration to it.
Access token issued by Shopify	Call the Shopify API on the store's behalf, to create discounts and write product metadata.
Product ID, title and handle for products used in an offer	Attach a bundle to the right product and display it on the storefront.
Offer configuration (quantities, discounts, labels)	Build the offer shown to shoppers and calculate the discount at checkout.
Admin interface language	Show the App in the language the merchant has chosen.

Permissions requested

The App requests only what it needs to work:

Read and write products — select the product an offer applies to, and store the tier configuration on it.
Read and write discounts — create and maintain the automatic discount that applies offers at the cart.

It requests no access to orders, customers, or financial data.

Who else sees the data

Data is hosted by the following processors:

Neon — database hosting, within the European Union (Frankfurt region).
[Application host] — runs the application.
Shopify — the platform the App runs on.

No data is sold, rented, or shared for advertising purposes.

Retention

When the App is uninstalled, authentication sessions are deleted immediately. All of the store's offer configuration is erased when Shopify sends its shop redaction request, roughly forty-eight hours after uninstall. That window lets a merchant who reinstalls the App find their configuration intact.

Your rights

Under the General Data Protection Regulation you have the right to access, correct, erase, restrict and port your data. Requests can be sent to contact@oa-digital.fr and are answered within thirty days.

The App also answers the access and erasure requests Shopify forwards automatically. Since no shopper personal data is stored, those requests return nothing.

You may lodge a complaint with the French data protection authority, the CNIL, at cnil.fr.

Security

All traffic to the App is encrypted over HTTPS. Access tokens are stored in a restricted database and are never exposed to the storefront. Requests coming from stores are signed and verified by Shopify.

Changes

Any change to this policy will be published on this page, with the date above updated accordingly.