Privacy Policy

1. Introduction

This Privacy Policy describes how Search Roadmap, LLC ("we," "us," or "our") collects, uses, processes, and protects your personal information when you use our BundlePal service (the "Service"). BundlePal is a subscription-based Software as a Service (SaaS) platform that analyzes eCommerce order data to provide product bundling and recommendation insights.

By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Information We Collect

2.1 Personal Information You Provide

We collect the following personal information that you provide directly to us:

• Account Information: Your email address and company information when you register for an account
• Payment Information: Payment data processed through our third-party payment processor, Stripe. We do not store complete payment card information on our servers
• Communication Data: Information you provide when you contact us for support or inquiries

2.2 eCommerce Order Data

As part of our Service, you upload eCommerce order data from your platforms for analysis. This data may include:

• Order transaction details (dates, amounts, product information)
• Product SKUs and descriptions
• Purchase patterns and frequencies
• Customer order histories (anonymized for analysis purposes)

2.3 Technical Information

We automatically collect certain technical information through analytics platforms:

• IP address and general location information
• Browser type and version
• Device information and operating system
• Usage patterns and Service interaction data
• Log files and performance metrics

2.4 Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience and analyze Service usage. You can control cookie preferences through your browser settings.

3. How We Use Your Information

We use your personal information for the following purposes:

3.1 Service Provision

• To provide and maintain the BundlePal Service
• To process your subscription payments through Stripe
• To analyze your uploaded order data and generate product bundling recommendations
• To provide customer support and respond to your inquiries

3.2 Service Improvement

• To analyze Service usage patterns and improve functionality
• To develop new features and enhance user experience
• To perform technical maintenance and ensure Service security

3.3 Communications

• To send you account-related notifications and updates
• To provide customer support responses
• To send marketing communications about our Service (with your consent where required)

3.4 Legal Compliance

• To comply with applicable laws and regulations
• To respond to legal process and government requests
• To protect our rights and prevent fraud or abuse

4. Information Sharing and Disclosure

4.1 No Third-Party Sharing

We do not share, sell, or rent your personal information to third parties for their marketing purposes.

4.2 Service Providers

We may share information with trusted third-party service providers who assist us in operating our Service, including:

• Stripe: For payment processing services
• Analytics Providers: For Service usage analysis and improvement
• Hosting Services: For data storage and processing (US-East Virginia region)

These service providers are contractually required to protect your information and use it only for the specified purposes.

4.3 Legal Requirements

We may disclose your information if required by law or in good faith belief that such disclosure is necessary to:

• Comply with legal obligations or court orders
• Protect and defend our rights or property
• Investigate potential violations of our Terms of Service
• Protect the safety of users or the public

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Industry-standard encryption for data in transit and at rest
• Secure hosting infrastructure in US-East (Virginia) region
• Regular security assessments and monitoring
• Access controls and authentication measures
• Employee training on data protection practices

However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as necessary to provide our Service and fulfill the purposes outlined in this Privacy Policy. Specifically:

• Account information is retained while your subscription is active and for a reasonable period afterward
• Order data uploaded for analysis is processed and may be retained to improve Service algorithms
• Technical and usage data may be retained for analytical purposes in anonymized form

You may request deletion of your personal information as described in Section 8.

7. International Data Transfers

Our Service is hosted in the United States (Virginia region). If you are located outside the United States, please be aware that your information will be transferred to and processed in the United States. We ensure appropriate safeguards are in place for international data transfers, including compliance with applicable data protection frameworks.

8. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

8.1 Access and Portability

• Request access to your personal information
• Receive a copy of your personal information in a structured, machine-readable format

8.2 Correction and Updates

• Correct inaccurate or incomplete personal information
• Update your account information through your Service dashboard

8.3 Deletion

• Request deletion of your personal information
• Close your account and have associated data removed

8.4 Processing Limitations

• Object to or restrict certain processing of your personal information
• Withdraw consent where processing is based on consent

8.5 Marketing Communications

• Opt out of marketing emails through unsubscribe links
• Manage communication preferences in your account settings

To exercise these rights, please contact us at bundlepal@searchroadmap.com.

9. Children's Privacy

Our Service is intended for businesses and individuals who are of legal age to enter into contracts (generally 18 years or older). We do not knowingly collect personal information from individuals under the age of 18. If we become aware that we have collected personal information from someone under 18, we will take steps to delete such information promptly.

10. Regional-Specific Provisions

10.1 European Union (GDPR)

If you are located in the European Union, you have additional rights under the General Data Protection Regulation (GDPR), including:

• Legal Basis: We process your information based on contract performance, legitimate interests, and legal compliance
• Data Protection Officer: You may contact our privacy team regarding GDPR matters
• Supervisory Authority: You have the right to lodge a complaint with your local data protection authority

10.2 California (CCPA)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA), including:

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt out of the sale of personal information (Note: We do not sell personal information)
• Right to non-discrimination for exercising CCPA rights

10.3 Other Jurisdictions

We comply with applicable data protection laws in jurisdictions where we operate. If you have specific questions about your local privacy rights, please contact us.

11. Industry Regulations and Compliance

We recommend consulting with your legal and compliance teams before using our Service if you are subject to industry-specific regulations.

12. Third-Party Services

Our Service integrates with third-party platforms and services, including:

• Stripe for payment processing
• Various analytics platforms for Service improvement
• eCommerce platforms from which you export order data

These third parties have their own privacy policies, and we encourage you to review them. We are not responsible for the privacy practices of these third parties.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. When we make material changes, we will:

• Post the updated Privacy Policy on our website
• Update the "Effective Date" at the top of this Policy
• Notify you by email or through our Service for significant changes
• Obtain your consent where required by applicable law

Your continued use of our Service after any changes constitutes acceptance of the updated Privacy Policy.

14. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at:

For data protection inquiries, please include "Privacy Policy" in the subject line of your email.