📅 Last Updated: September 11, 2026

⚡

Privacy Policy At a Glance

Google Drive — BundleShelf accesses only the specific Google Drive files and folders you explicitly select.
Per-File Access — BundleShelf requests drive.file. It cannot view, scan, or access the rest of your Google Drive.
AI — OpenRouter and supported AI models, including Google Gemini, may process permitted file details to organize and classify products.
AI data handling — Google Workspace data submitted through OpenRouter is processed using configured Zero Data Retention (ZDR) controls.
AI training — Google Workspace data obtained through Google APIs is not used or shared by BundleShelf for generalized AI or ML model training.
Advertising — Google Workspace data obtained through Google APIs is not used for advertising, targeting, or profiling.
Payments — BundleShelf uses Stripe for payment processing. Payment card credentials are never handled or stored on our servers.
Original files — BundleShelf does not move, rename, modify, or delete your original Google Drive files.
Your control — You can revoke BundleShelf's Google access at any time through your Google Account permissions.

BundleShelf ("BundleShelf," "we," "us," or "our") helps digital-product sellers transform files stored in Google Drive into organized, browsable digital-product showcases and sell eligible digital products through the Service.

This Privacy Policy explains what information we collect, how we use and protect it, when information may be shared with service providers, how payments are handled, and the choices available to you when you use bundleshelf.store .

01 Account Information

BundleShelf currently uses Google Sign-In for authentication. When you sign in with Google, we may receive information provided by Google, including:

Your name
Your email address
Your Google account identifier
Your profile picture, where provided
Authentication-related session tokens

✅

No password access. BundleShelf does not receive or store your Google password. Authentication is handled entirely through Google's OAuth infrastructure.

For information about Google's handling of authentication data, please review the Google Privacy Policy.

02 Google Drive Information

BundleShelf allows you to create public showcases using select files and folders stored in your Google Drive.

Depending on the specific items you select, BundleShelf may access:

📄 Selected file and folder names

🧩 File formats and MIME types

🗂️ Parent-child folder relationships

🏷️ File identifiers and size metadata

📦 File content strictly required for showcase functionality

🖼️ Supported image, audio, or document previews

Per-File Scope (drive.file)

BundleShelf does not request full read access to your entire Google Drive. We exclusively use the per-file scope:

https://www.googleapis.com/auth/drive.file — grants access only to the specific files and folders that you explicitly choose to open or select with BundleShelf.

🔐

Strict per-file boundary. BundleShelf cannot see, list, search, or read files in your Google Drive that you have not explicitly selected through the Google file picker.

BundleShelf uses Google Drive information only as necessary to provide the functionality you request, including organizing, classifying, displaying, and generating supported previews for digital-product content.

🛡️

Your original files remain under your control. BundleShelf does not move, rename, modify, or delete your original Google Drive files.

03 How We Use Your Information

We use information collected through BundleShelf to provide, maintain, secure, and improve the service. This includes:

Managing your BundleShelf account
Authenticating you via Google Sign-In
Connecting your chosen Google Drive files
Classifying files into storefront collections
Generating virtual shelves and showcases
Rendering supported file previews
Operating and maintaining the platform
Processing purchases via Stripe
Providing seller payout & transaction data
Monitoring performance and uptime
Preventing fraud, abuse, and security incidents
Delivering customer support
Measuring aggregate platform analytics
Displaying non-personalized advertisements

✅

Google Workspace data limitation. Google Workspace user data obtained through Google APIs is used only as necessary to provide the functionality requested and strictly adheres to the Google User Data Policy, including its Limited Use requirements.

✅

No sale of Google Workspace data. BundleShelf does not sell Google Workspace user data or personal records.

04 Google Workspace API & Limited Use

✅

Google Limited Use Compliance. BundleShelf's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Where required to categorize your digital products, BundleShelf may process information associated with your selected files:

File and folder titles, types, and MIME descriptors
File metadata and dimensions
Text extracts necessary for collection categorization

AI Processing

BundleShelf may utilize third-party AI infrastructure to organize, classify, or summarize product files when necessary to deliver automated catalog features.

Service	Purpose
OpenRouter	AI model routing gateway used to access supported classification models.
Google Gemini	AI model services used for automated product tagging and showcase structure.

Zero Data Retention

🔒

Zero Data Retention (ZDR). When Google Workspace data is processed through OpenRouter, BundleShelf uses configured Zero Data Retention controls. Requests are routed strictly through providers and endpoints adhering to zero retention.

No Generalized AI/ML Training

🚫

No generalized AI/ML training. Google Workspace user data obtained through Google APIs is not used or shared by BundleShelf for generalized AI or machine learning model training.

05 Database & Storage

BundleShelf uses MongoDB for database infrastructure.

Stored database records include your account details, showcase configurations, product titles/descriptions, platform preferences, transaction logs, and operational telemetry.

✅

Google Drive separation. BundleShelf does not duplicate or store your Google Drive files in our primary database; we store only the pointers and metadata necessary to render your showcase.

06 Payment Information

BundleShelf uses Stripe for payment processing and checkout infrastructure.

When a customer purchases a product through your showcase, all card details, billing addresses, and payment credentials are submitted directly to Stripe.

BundleShelf receives only transaction references, amounts, currency types, and completion status.
BundleShelf does not collect, receive, or store full credit card numbers, CVVs, or bank credentials.

💳

Stripe PCI Compliance. All transactions are processed securely via Stripe's PCI-DSS compliant infrastructure. Please refer to the Stripe Privacy Policy for further information.

07 Analytics

ℹ️

No Google Analytics. BundleShelf does not currently use Google Analytics or third-party behavioral trackers.

BundleShelf measures page views, storefront interactions, error rates, and load performance using internal logging systems. Google Workspace data is excluded from analytics processing.

08 Advertising & Adsterra

BundleShelf may display banner advertisements served by Adsterra. Adsterra may collect device identifiers, IP addresses, and cookie data in accordance with their Privacy Policy.

🚫

Strict data segregation. Google Workspace user data obtained through Google APIs is never shared with Adsterra and is never used for ad personalization, remarketing, or profiling.

09 Cookies & Similar Technologies

We use essential cookies to keep you signed in, remember your preferences, and mitigate security threats. You can disable cookies in your browser settings, though doing so may prevent BundleShelf from operating correctly.

10 Public Showcases

When you publish a showcase, product descriptions, cover images, titles, and selected file previews become accessible to anyone who visits the showcase URL.

⚠️

Public Access Warning: Do not publish private, confidential, or copyrighted content that you do not have permission or distribution rights to share publicly.

11 Information Sharing

We do not sell personal data. We share information only with service providers strictly required to deliver the platform (database hosting, payment processing via Stripe, and AI classification with ZDR) or where required by law.

12 Data Security

We implement organizational safeguards, SSL/TLS encryption for all web traffic, secure API gateways, and scoped token storage to protect user data from unauthorized access.

13 Data Retention

We retain showcase metadata and account records as long as your account remains active. Transaction and payment records are maintained by Stripe in compliance with tax and financial record-keeping mandates.

14 Account & Data Deletion

You can request full deletion of your BundleShelf account and metadata at any time by contacting support@bundleshelf.store.

You may also revoke BundleShelf's Drive permissions at any time through your Google Account Permissions.

🗂️

Your Google Drive files are unaffected. Deleting your BundleShelf account or revoking access leaves your original files inside Google Drive untouched.

15 Third-Party Services

Provider	Function
Google	Sign-In authentication and Drive API integration (`drive.file`).
MongoDB	Application database and user state persistence.
Stripe	Payment infrastructure, checkout processing, and billing.
OpenRouter	AI model routing configured with Zero Data Retention (ZDR).
Google Gemini	AI-driven file classification and metadata organization.
Adsterra	Advertising network integration.

16 Children's Privacy

BundleShelf is not intended for use by children. We do not knowingly collect personal information from individuals under the legal age in their jurisdiction.

17 Your Privacy Rights

Depending on your jurisdiction, you may have the right to access, rectify, export, or delete your personal data. To exercise these rights, email us at support@bundleshelf.store.

18 International Data Processing

BundleShelf and its third-party service providers process data internationally using cloud hosting and transmission security measures designed to comply with cross-border data transfer laws.

19 Changes to This Policy

We may update this Privacy Policy periodically. Significant changes will be noted by updating the "Last Updated" date at the top of this page.

20 Contact Us

If you have questions regarding this Privacy Policy or our data security practices, reach out to:

BundleShelf

🌐 Website: bundleshelf.store

✉️ Email: support@bundleshelf.store