Bundles App & Upsells Help center

Privacy Policy: Bundles App & Upsells

Last updated: October 25, 2026

Flowsplus ("we", "us") makes Bundles App & Upsells (the "App") for BigCommerce merchants. This policy explains what data the App handles and why.

What we collect

From the merchant's BigCommerce store, through the permissions you approve at install:

  • Store identifiers (store hash), an API access token, store currency and price format.
  • The email address and user ID BigCommerce shares when a control-panel user opens the App. These are kept only in that user's signed session cookie, not in our database.
  • Product catalog data (names, prices, options, variants, images, stock), read to show deals and kept in a short-lived cache (up to 7 days).
  • Customer group names and IDs, for deal eligibility.
  • Order line items (products, quantities, prices, discounts, and the cart and order IDs), used to attribute sales to deals.

What merchants create in the App: deals, designs, settings and A/B tests.

From storefront visitors: anonymous, aggregated counts of views, selections and add-to-carts per deal and day, plus a record of which deal added which products to a cart ID. Cart records are deleted after 90 days. The widget uses the browser's session storage (cleared when the tab closes) for a random session ID sent with those anonymous counts, the A/B design shown, countdown timers and scratch-off reveals. It sets no cookies. We do not collect shopper names, emails, addresses, IP-based profiles or payment details.

Support chat: the in-app chat is provided by Chatwoot. When you open the App, it shares with Chatwoot your email address, your BigCommerce user ID, your store's name, URL, country and BigCommerce plan, your App plan and billing status, and summary figures (number of deals, deal sales and additional revenue this month), so our support team can help without asking. Messages you send in the chat are stored by Chatwoot.

Billing: subscriptions are handled by our payment provider, Polar (polar.sh). Polar processes payment details; we only receive the plan, status and billing dates, linked to your store hash.

How we use it

To run the App: show deals on your storefront, create and remove the matching BigCommerce pricing rules and promotions, report performance, bill your plan, and provide support (including the in-app chat). We don't sell data and don't use it for advertising.

Where it's stored

With our hosting provider (Vercel) and a managed PostgreSQL database provider. Data is encrypted in transit (HTTPS).

Retention

  • When you uninstall, every script, pricing rule, promotion and webhook the App created is removed from your store immediately. Your App data is kept for 30 days in case you reinstall, then permanently deleted.
  • Cart attribution records: 90 days. Processed order IDs: 60 days. Catalog cache: 7 days.
  • Aggregated daily statistics are kept while the App is installed.

Your rights

Merchants can request a copy or deletion of their data at any time by emailing support@feedbackflowhq.com. Shoppers' requests made to a merchant can be forwarded to us; we hold no personal shopper data beyond cart and order IDs.

Sub-processors

BigCommerce (platform), Vercel (hosting), a managed PostgreSQL database provider, Polar (billing), Chatwoot (support chat), and Google Fonts if a merchant picks a web font for the widget.

Contact

Flowsplus: support@feedbackflowhq.com