Privacy Policy.

1. Who we are, and our role in your data

Vunda is a product operated by Blue Sky PPC Ltd, a company registered in England and Wales (company number 13739023), with its registered office at Suite GA, St George's House, Lever Street, Wolverhampton, WV2 1EZ. For any privacy-related enquiry, contact us at support@vunda.app.

We handle two different kinds of data, and our role is different for each. It matters, because it determines who you should go to about your data.

• Data we control. For merchant account details, the app configuration you build, visitors to this website, and our marketing waitlist, Blue Sky PPC Ltd is the data controller. We decide why and how that data is used, and this policy is our notice to you about it.
• Data we handle for a merchant.For a merchant's own customers' data, meaning the shopper information the app features in section 5 produce, we act as a processor and the merchant is the controller. We only receive that data because the merchant switched on the feature that produces it, we act on their instructions, and we do not use it for our own purposes or sell it.

If you are a shopper using a merchant's app and you want your data seen, corrected or deleted, the merchant who runs that app is your first point of contact. You can also contact us at support@vunda.app and we will pass your request to them.

We are putting a data processing agreement in place to cover the processor role described above. Merchants can request a copy from support@vunda.app.

2. Information we collect

We collect the following categories of information:

• Account information - your store owner name and email address, obtained from Shopify when you install the app, together with the Shopify session and store identifiers used to authenticate you inside the Shopify admin.
• Shopify store data - when you install the app, you authorise Vunda to access your store information, products and collections through the Shopify Admin API, along with an access token, stored encrypted, that keeps your app in sync.
• App content you create - the app design, layout, branding, colours and any media you upload while building your app. Section images, video and logos are uploaded to your own Shopify Files; app build assets such as custom fonts and app icons are stored on Vercel Blob. Your app configuration is stored in our database.
• Your customers' data, for the features you enable - if you turn on abandoned-cart reminders, push notifications, Judge.me reviews or Google Analytics, shopper data is collected and shared with the relevant provider. Section 5 sets out exactly what, for each feature. None of it is collected if you leave those features off.
• Marketing waitlist - if you join our pre-launch waitlist on this site, we store the email address you give us so we can tell you when Vunda is available.
• Website usage and device data - IP address, browser type, operating system, pages visited, referring URLs and interactions with this site.
• Abuse-prevention data- we keep short-lived counters keyed to the IP address of the device making a request, or to a merchant identifier on authenticated calls, so we can rate limit and block abuse. This covers our public mobile API, so it includes shoppers using a merchant's app, as well as public forms on this site. These records expire automatically a short time after the rate-limit window they belong to, and are not used for anything else.
• Product analytics data - interactions, clicks, page views, and session recordings and error reports, collected via PostHog. On this website, none of this is collected unless you accept analytics. See sections 6 and 9.
• Crash diagnostics from published apps- when a merchant's app crashes or errors, a diagnostic report is sent to our error-tracking provider, Sentry, in our own account. It is configured not to send personal information by default, and the only identifying detail we attach is which merchant's app it came from. We cannot rule out that a crash report incidentally contains data from the moment of the crash.

3. How we use your information

• To provide, maintain and improve the service.
• To connect your Shopify store and keep your app in sync with your products and collections.
• To build, preview, and publish your app to the Apple App Store and Google Play.
• To send the push notifications and abandoned-cart reminders you choose to enable, and to cancel a reminder once a shopper checks out.
• To authenticate you and secure your account.
• To send you service and account communications, and to contact waitlist subscribers about launch.
• To measure how our funnel and product are used, where you have accepted analytics, so we can improve them.
• To diagnose crashes and errors in published apps so we can fix them.
• To detect fraud, rate limit our public API, prevent abuse, and maintain security.

4. Legal basis for processing (UK GDPR)

Under UK GDPR, we process your personal data on the following legal bases:

• Contract - processing necessary to provide the service you signed up for, including connecting your store, building your app and publishing it.
• Consent - for analytics on this website, and for marketing communications including the waitlist. Analytics on this site are switched off until you actively accept them, and you can decline or later withdraw consent without losing any functionality.
• Legitimate interest - for security, fraud prevention, rate limiting, crash diagnostics and improving the service, where these interests are not overridden by your rights.

Where we act as a processor for a merchant, as described in section 1, we process on that merchant's instructions. The merchant is responsible for having a lawful basis for the shopper data their app collects, and for telling their shoppers about it in their own privacy policy.

5. Your Shopify store and your customers' data

Vunda's standing access to your Shopify store is limited to the data needed to build and run your app, primarily your products, collections and store information. Beyond that, shopper data is only collected by the features you choose to switch on. Each one is set out below, so you can match your own privacy policy and your App Store and Google Play data disclosures to it.

• Abandoned-cart reminders.If you enable them, your app reports a signed-in shopper's Shopify customer identifier and a short cart summary (item count, value, currency, and the leading product's title and image) to Vunda, so we can send a single reminder push if they do not check out. We use it only to send and then cancel that reminder. Guest (not signed-in) shoppers are never included.
• Push notifications. If you enable a push provider (OneSignal or Klaviyo), your app identifies each signed-in shopper to that provider directly. It sends their Shopify customer identifier, email address, phone number(used to create the provider's SMS subscription) and first and last name, along with their device push token. Your app also reports their shopping behaviour to that provider, so it can target and personalise sends. With OneSignal that is stored against the shopper as profile tags: the last product viewed (identifier and name) and when, cart updates and the product involved, and whether checkout was started together with the checkout value and item count. With Klaviyo the equivalent is sent as viewed product, added to cart and started checkout events, carrying the product identifier and name, price, currency and quantity, and the checkout item count and item names. If you do not enable a push provider, none of this is sent, and guest shoppers are never identified.
• Judge.me reviews.If you connect Judge.me, our server fetches your reviews on the app's behalf using your Judge.me credentials, so review text and reviewer names pass through our systems on the way to your app. Your Judge.me private token is stored encrypted and is not shown back to you or anyone else through our admin.
• Google Analytics 4. If you enable Google Analytics, your app sends shopper activity events (screen views, product views, add to cart, begin checkout and purchase) to your ownGoogle Analytics property, using Google's Firebase SDK. Google processes that data for you, not for us, and we do not receive it.

Your push provider, and Judge.me and Google where you connect them, act as processors for you, under your own agreements with them. See OneSignal's privacy policy at onesignal.com/privacy, Klaviyo's at klaviyo.com/legal/privacy-notice, Judge.me's at judge.me/privacy, and Google's at policies.google.com/privacy.

Because you publish your app under your own developer accounts, disclosing all of this to your shoppers is your responsibility. Keep your privacy policy, your App Store privacy details and your Google Play Data safety form in step with the features you turn on.

6. Analytics and your choices

We use PostHog for funnel and product analytics, session replay and error tracking, to understand how people use the service and to find and fix issues. PostHog may collect interaction data, page views, session recordings (which can capture mouse movements, clicks and page content) and error reports. Our PostHog data is stored in the EU (Frankfurt).

Analytics are off by default and stay off until you accept them. PostHog starts opted out on every visit to this website: nothing is captured and no analytics storage is written to your device until you accept the banner. If you decline, that choice is remembered and we do not ask again, and nothing is captured. If you accept, you can withdraw consent at any time by clearing this site's data in your browser, which returns you to the opted-out state, or by contacting support@vunda.app.

Vunda's admin runs embedded inside the Shopify admin, where we do not show a consent banner. Because there is no way to ask you there, analytics stay switched off entirely on those screens.

We do not use advertising pixels such as the Meta Pixel or Google Ads tracking on this site. For more information, see PostHog's privacy policy at posthog.com/privacy.

7. Third-party services and sub-processors

We rely on the following providers to operate the service:

• Shopify - store integration via the Shopify Admin API, and authentication via the App Bridge session token, under your authorisation.
• MongoDB Atlas - hosting for the database holding your account, app configuration and the feature data in section 5.
• Vercel - web hosting, infrastructure, and storage for app build assets (Vercel Blob).
• Expo (EAS) - the build and submission service that compiles and ships your app. It receives your merchant identity, your store domain, your app configuration and branding, and the build credentials and secrets needed to produce and upload your app. No shopper data is sent to Expo. United States.
• PostHog - product analytics, session replay and error tracking on this website, only after you accept analytics (EU / Frankfurt).
• Sentry - crash and error reporting from published apps, into Vunda's own account, so we can fix faults. EU / Germany.
• OneSignal - mobile push delivery and shopper push profiles, used only where you select it as your push provider; acts as a processor for you.
• Klaviyo - the alternative mobile push provider, used only where you select it instead; acts as a processor for you.
• Judge.me - product reviews, used only where you connect it. Review content and reviewer names pass through our server on the way to your app.
• Google - Firebase and Google Analytics 4, used only where you enable analytics in your app and sending to your own property; and Google Play, where your app is published under your own developer account.
• Apple - the App Store, where your app is published under your own developer account.

When you pay to publish your app, billing is handled by Shopify App Pricing on your Shopify invoice; we do not process or store your card details.

8. International data transfers

Vunda is operated from the United Kingdom. Our PostHog analytics data is stored in the EU (Frankfurt) and our Sentry crash data in the EU (Germany). Expo, which runs our app builds, is based in the United States, and several of the other providers in section 7 operate internationally, including from the United States. Where we have not named a region for a provider above, we are not making a claim about where that provider stores data; contact support@vunda.app if you need current details for a specific one.

When your data is transferred outside the UK, we rely on appropriate safeguards such as the UK International Data Transfer Agreement, the UK Extension to the EU Standard Contractual Clauses, or adequacy decisions where applicable. By using the service you acknowledge that your data may be processed in the UK, the EU, the US and other countries where our providers operate.

9. Cookies and similar technologies

• Essential cookies - required for authentication, session management and security. These cannot be disabled.
• Analytics storage - set by PostHog to understand product usage and to capture session recordings and error reports. None of it is written until you accept analytics on the banner. Decline and nothing is stored.
• Your consent choice- we record whether you accepted or declined in your browser's local storage rather than in a cookie, so that remembering your answer does not itself place a cookie. It stays on your device and is not sent to us.

We do not set advertising cookies. Inside the embedded Shopify admin there is no banner and no analytics storage is written at all. You can control cookies through your browser settings, though disabling essential cookies may affect how the service works.

10. Data retention and deletion

We retain your account and app data for as long as your account is active, except where we are required to keep something longer for legal, accounting or security reasons. Specifics:

• Uninstalling the appends your session and removes the Expo build resources for your app, but it does not by itself erase your stored data. Shopify then sends us a store redaction request, normally about 48 hours after the uninstall, and that request is what triggers the erase of your store's data from our database.
• Abandoned-cart reminder data is deleted automatically 14 days after the last activity on that cart. This applies to every record, including reminders that were never sent. It is also deleted immediately when Shopify sends us a customer redaction request.
• Abuse-prevention records keyed to IP addresses expire automatically a short time after they are written.
• Waitlist email addresses are kept until we launch or until you ask us to remove yours. They are not covered by the automated store erase, so email support@vunda.app and we will delete yours.
• A small number of older stores that pre-date the current install flow are set up and run by us directly. They are outside the automated erase described above, and we handle deletion for them by hand instead. If this applies to you, contact support@vunda.app and we will confirm what we hold and remove it.

You can request earlier deletion at any time by contacting support@vunda.app.

11. Your rights

United Kingdom (UK GDPR) and EU (GDPR). You have the right to access, rectify, erase, restrict, and port your personal data, and to object to processing or withdraw consent. To exercise these rights contact support@vunda.app; we will respond within 30 days. You may also complain to the UK Information Commissioner's Office (ico.org.uk) or your local supervisory authority. If your request concerns data we hold for a merchant as their processor, see section 1: the merchant is the controller and we will pass your request to them.

United States (California and other states). If you are a California resident you have the right to know, delete, and correct your personal information, and to opt out of its sale or sharing (we do not sell your personal information). Residents of other states with comprehensive privacy laws have similar rights. Contact support@vunda.app to exercise them.

Canada (PIPEDA) and Australia (Privacy Act 1988). You have the right to access and correct your personal information and to complain to the relevant regulator (the Office of the Privacy Commissioner of Canada, or the OAIC in Australia).

12. Data security

We use reasonable technical and organisational measures to protect your data, including encrypted connections (HTTPS), access controls, encryption at rest for stored access tokens and provider credentials, and rate limiting on our public API. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Where you have invited us into your Apple Developer or Google Play account so that we can build and upload your app, we also hold the credentials that access gives us, such as App Store Connect API keys and our Google service account key. We keep them encrypted at rest and restrict access to personnel who need it. If we become aware of a compromise of those credentials, or of unauthorised access to your developer accounts obtained through them, we will notify you without undue delay and take reasonable steps to revoke and replace the affected credentials. You can remove our access from your own accounts at any time. See section 5 of our Terms of Service.

13. Children

The service is intended for business use and is not directed at children. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, contact us and we will delete it.

14. Changes

We may update this Privacy Policy from time to time. Material changes will be communicated via the email associated with your account or by notice on the site. Continued use of the service after changes take effect constitutes acceptance.

15. Contact

For questions about this Privacy Policy or to exercise your rights, contact us at support@vunda.app.