1. Who we are
DKN Bundles: Box Builder (the App) is provided by DKN Technologies (DKN, we, us, or our) in Bengaluru, India. Privacy questions can be sent to hello@dkntechnologies.com.
2. Scope
This policy explains how we collect, use, disclose, retain and protect information when a Shopify merchant installs or uses the App. Shopify separately processes information under its own privacy terms. Merchants remain responsible for their storefront privacy notices.
3. Information we process
- Merchant and store information: shop domain, store name, installation status, granted permissions and encrypted access credentials.
- Bundle configuration: profile names, selected products and variants, pack counts, limits, display copy, design choices, images and app-owned Shopify metadata.
- Product and file information: identifiers, titles, handles, SKUs, prices, availability and selected Shopify Files.
- Bundle-order information: order identifiers, timestamps, line items, variants, quantities, bundle selections, processing status and errors.
- Technical information: authenticated webhook records, security events, diagnostics and service errors.
The App does not request protected customer fields for its core bundle functionality. Shopify order events can nevertheless include buyer-related information such as name, email, phone and address. The App discards those fields the moment an event arrives: an order event is reduced to order identifiers, timestamps, currency and line totals before anything is written to storage, so no customer name, email, phone or address is ever retained. We do not use buyer information for advertising or customer profiling.
4. Why we process information
We process information to install, authenticate, operate and secure the App; let merchants configure and publish bundles; display eligible Shopify resources; process supported bundle activity; provide operational reporting and support; prevent duplicate processing; and comply with valid legal or privacy requests.
5. Sharing and subprocessors
We do not sell personal information or use order data for targeted advertising. Information is shared only as needed with Shopify, Hostinger as our hosting and database provider, professional advisers or service providers acting for DKN, or authorities where disclosure is legally required.
6. International transfers
DKN operates from India and uses infrastructure that may process information in other countries. Where required, appropriate contractual or legal safeguards are used.
7. Retention and deletion
Configuration and bundle-order records are retained while the App is installed and as needed to operate, secure and support it. On uninstall, active Shopify credentials are disabled or deleted. Webhook records are reduced to non-personal order and line totals on arrival and are deleted after 400 days. Shopify's authenticated privacy-erasure requests are honoured: a customer erasure request deletes every record the App holds for the orders named in it, and a shop erasure request deletes the shop configuration, bundle-order records and webhook records in full, unless retention is required by law. Routine operational logs are generally retained for up to 90 days, support correspondence for up to 24 months, and deleted backup data may persist for up to 30 days.
8. Security
Safeguards include HTTPS, Shopify session-token authentication, webhook HMAC verification, AES-256-GCM encryption of Shopify OAuth tokens at rest and environment-based secret management. No system is completely secure; suspected misuse should be reported promptly.
9. Privacy rights
Depending on applicable law, individuals may have rights to access, correct, delete, restrict or object to processing, or receive a portable copy. Buyers should normally contact the Shopify merchant first so Shopify can route the appropriate request. Merchants may contact DKN directly.
10. Children
The App is intended for Shopify merchants and is not directed to children. We do not knowingly collect children's personal information for our own purposes.
11. Changes
We may update this policy as the App or legal requirements change. The revised policy will be posted here with an updated effective date.
12. Contact
DKN Technologies
Bengaluru, India
hello@dkntechnologies.com