Privacy policy

This policy explains what Matrix Bundles collects, why, and for how long. Matrix Health Group Ltd publishes it as the developer of the app. It covers the app itself and this page.

In short

• The app collects nothing at all from shoppers.
• It never reads customer data, and it does not ask Shopify for permission to.
• The builder it puts on a storefront sets no cookies and contacts nothing outside the shop. It keeps a note of what the shopper picked, in that one browser tab, so a reload does not lose their work.
• Bundle settings and discount rules are stored on the merchant’s own Shopify store, not in our database.
• Nothing is sold, shared, used for advertising, or used for profiling.
• If you connect an AI assistant such as Claude or ChatGPT, what it reads is sent to the company that runs it, under your own account with them. Nothing is connected unless you approve it.

What we receive from Shopify

When a merchant installs Matrix Bundles, Shopify provides the shop’s domain and an API access token. That token can write products, cart transforms, metaobjects and metaobject definitions, read your existing discounts, and manage which sales channels a product is published to. It carries no permission to read customers or orders, so the app could not reach that data even if it tried.

If you turn on discount rules, Shopify asks you once for one more permission: to make discounts. Your first live rule then makes one automatic discount on your shop, called “Matrix discounts”, which all your rules share. The rules themselves are stored on your own shop, like your bundle settings.

Alongside the token we hold the permissions it was granted, when it expires, and the token used to renew it. That record, one row per shop, is what the app keeps so it can reach your shop.

The app uses those permissions to read your products when you are setting a bundle up, and to store your bundle rules on your own shop. When you set a bundle live — not when you save a draft — it creates one hidden helper product in your catalogue to carry the bundled line’s title and price. Shopify labels it “accessible only by direct link”, so it does not appear in your storefront, collections or search. That helper is the only thing the app adds to your catalogue, and it is not removed automatically if you uninstall.

What we receive from the merchant

Almost nothing. The app has no form anywhere that asks for information about you. One thing you can hand it is a picture for a bundle: that passes through our server on its way to the media storage Shopify gives your shop, and we do not keep a copy.

If you make an access key, the app keeps a scrambled copy of it on your own shop — never the key itself — with the name you gave it, the first few characters so you can tell your keys apart, what it may do, the day it was made, the last day it was used, and the day you revoked it if you did. Calls made with a key pass through our server on their way to your shop. The app does not store what a call sends or what comes back; our host’s server log records the address each request went to and whether it worked, as it does for every request to the app.

The record Shopify creates for your shop has spare fields for a staff member’s name and email address. The app signs in with a shop-level token rather than a personal one, so those fields are never filled in. No individual member of your staff is identified to us.

If you connect an AI assistant

You can connect Claude, made by Anthropic, or ChatGPT, made by OpenAI, to the app. The assistant can then read your bundles and, only if you tick the box that allows it, change them. Nothing is connected unless you approve it yourself, on the app’s Connect screen inside your Shopify admin.

What the assistant asks for is sent to it, and so to Anthropic or OpenAI: your bundles and their settings, how the bundle builder looks and what it says, and, if it tries a basket, the names, quantities and prices of the products in it. That happens under your own account with them, and their terms and privacy policy cover what they do with it. The app has no permission to read customers or orders, so it cannot send those.

For each connection, the app keeps a record in our own database: which store, which assistant and the website it came from, whether it may read only or also make changes, when you connected it, when it was last used, and when it ended. It does not record which member of your staff pressed Connect.

The passes the assistant uses to sign in are kept only as scrambled copies that cannot be turned back into a working pass, and the short-lived one it sends with each call is not stored at all. As with keys, calls pass through our server on their way to your shop, the app does not store what a call sends or what comes back, and our host’s server log records the address each request went to and whether it worked.

To check which assistant is asking, the app reads that assistant’s public description from claude.ai or chatgpt.com. That request sends nothing about your shop.

To end a connection, open the app’s Access keys screen and press Disconnect beside it; it stops working on its next call. A connection also ends by itself 90 days after you approved it. Records of ended connections are kept, marked as ended, until you uninstall the app. Uninstalling deletes every connection for your shop.

What we collect from shoppers

Nothing at all reaches us.

The app operates at Shopify’s protected customer data Level 0. It requests no customer data permissions and never reads customer data.

The builder the app draws on a shop’s storefront runs entirely in the shopper’s browser and talks only to that shop. It writes no cookie and makes no request to us or to any third party. While someone is putting a bundle together it keeps a note of what they have picked — which items and how many — in that one browser tab, so that reloading the page does not throw their work away. That note holds nothing about the person, never leaves the browser, and clears itself. Adding a bundle to the basket goes to the shop’s own cart, exactly as any other add-to-basket does.

Product and basket data at checkout

Working out a bundle price, or what a discount rule takes off, requires reading what is in the basket. Those calculations are performed by programs that run on Shopify’s own servers during checkout. The product and basket data they read is never transmitted to us and is never stored by us.

How we use what we hold

Only to operate the app for the merchant who installed it, and to answer support requests. We do not sell it. We do not share it. We do not use it for advertising or for profiling.

No third party receives it either. The app makes no calls to analytics, error-tracking, logging or email services. The only companies involved in running it are Shopify and the company that hosts it. The one exception is an AI assistant you connect yourself, as described above: what it reads goes to the company that runs it.

How long we keep it

For as long as the app is installed. When a merchant uninstalls, the shop domain and access token are deleted, along with every AI assistant connection for that shop. Shopify then sends an automatic deletion request 48 hours after uninstall, and we delete again on receiving it.

Bundle settings are held on the merchant’s own Shopify store rather than in our database, so they remain with the merchant and leave with the app.

Where your data is held

The app and its database run on DigitalOcean, London, United Kingdom. Matrix Health Group Ltd is a UK company, and the records held there are the shop domain, the access token, the permissions it carries, the token used to renew it, and the record of any AI assistant you connect.

Deletion requests from Shopify

Shopify requires every app to implement three compliance webhooks, and ours are built and cryptographically verified so that a request which does not genuinely come from Shopify is rejected.

• A customer data request returns an empty disclosure, because we hold no customer data to disclose.
• A customer erasure request has nothing to erase, for the same reason.
• A shop erasure request, sent 48 hours after uninstall, deletes any remaining session record and AI assistant connections for that shop. Uninstalling already deletes them, so this is a backstop that makes the erasure true even if the first signal was missed.

This page

This page runs no analytics and sets no cookies. It loads its typefaces from Google Fonts, which places no cookies but does mean your browser makes a request to Google and Google can see your IP address. Nothing else on this page contacts a third party.

Who we are, and how to reach us

Matrix Health Group Ltd
Registered in England and Wales, company number 17099304
VAT registration number GB 523 7816 82
Paddock Business Centre, 2 Paddock Road, Skelmersdale, Lancashire, WN8 9PL

Questions about this policy, or about data held for your shop: support@matrixhealthgroup.co.uk

For how the app behaves rather than what it stores, see support and common questions.

Changes to this policy

If this policy changes, the date at the top of the page changes with it. Material changes are described here rather than applied quietly.

• 28 September 2026 — AI assistants. You can now connect Claude or ChatGPT to the app. This policy now says what the assistant receives, what the app keeps about each connection, and how to end one.
• 26 September 2026 — discount rules. If you turn them on, the app asks Shopify for permission to make discounts, and your first live rule makes one automatic discount on your shop. This policy now says so, and that your rules are stored on your own shop.
• 25 September 2026 — access keys. The app can now make a key that lets another program or an assistant reach your bundles. This policy now says what the app keeps about each key, on your own shop, and what our server records when a key is used.
• 16 September 2026 — three corrections. The storefront builder now keeps a note of a shopper’s picks in their browser tab; this policy previously said it stored nothing in the browser. The app can now be handed a picture for a bundle, which passes through our server; it previously said the app asked you to submit nothing. Both statements were true when written and were overtaken by changes to the app. The date at the top of this page is now fixed in the page itself, so that it can no longer fall behind the words above it.