How BastionCart handles store data.

This is a working privacy policy page for BastionCart’s current hosted app. Final legal details are still being completed.

Effective date: TODO

Introduction

BastionCart respects merchant privacy and is committed to handling store data responsibly. This page explains what BastionCart collects, how it is used, and the choices available to merchants who install or use the app.

Information BastionCart collects

Shopify store domain and shop identifiers
App installation and authentication data
Active discount configuration data needed to run discount audits
Scan summaries, findings, and related app usage data
Support messages or support-related information merchants choose to send

How BastionCart uses information

Authenticate and operate the app
Scan active discounts
Generate audit findings and discount risk summaries
Store saved scan results
Improve app reliability and merchant support

Data sharing

BastionCart does not sell merchant data.

BastionCart may share limited information with service providers needed to operate the app.

Shopify
Vercel
Supabase

Retention and security

BastionCart retains data for as long as needed to operate the app, support merchants, maintain saved audit results, and meet legal or operational obligations.

BastionCart uses reasonable administrative, technical, and organizational measures to protect store data, but no method of storage or transmission is completely secure.

Contact

Privacy contact: TODO

Business/entity name: TODO