Bundled Privacy Policy

Bundled Global Inc. and/or its affiliates ("Bundled," "we," "us," or "our") provides subscription management, billing, account administration, and related services through our websites, mobile applications, digital properties, and other services that link to this Privacy Policy (collectively, the "Services").

This Privacy Policy explains how we collect, use, disclose, retain, and otherwise process personal information in connection with the Services.

Please read this Privacy Policy carefully. By using the Services, you acknowledge the data practices described in this Privacy Policy.

1. Scope of This Privacy Policy

This Privacy Policy applies to personal information we collect:

• through the Bundled website and app;
• when you sign up for, access, or use the Services;
• when you communicate with us by email, text, chat, phone, or support channels;
• when you interact with our pages, forms, help center, surveys, waitlists, or marketing communications; and
• when we act on your behalf in connection with subscription management, billing, account access, or related service administration.

This Privacy Policy does not apply to third-party websites, apps, services, or platforms that may be linked to, accessed through, or interacted with in connection with the Services. Those third parties have their own privacy policies and terms, and you should review them separately.

2. Personal Information We Collect

We collect personal information from you, from third parties acting at your direction, from service providers, and automatically through your use of the Services.

Depending on how you use Bundled, we may collect the following categories of personal information:

2.1 Contact and Account Information

• Name
• Email address
• Phone number
• Mailing or billing address
• Account username
• Password or account authentication information used to access Bundled
• Membership status, account settings, preferences, and communication preferences

2.2 Identity Verification Information

Where necessary for identity verification, fraud prevention, compliance, or account security, we may collect:

• date of birth,
• government-issued identification information,
• account-specific verification information,
• or other information reasonably necessary to verify identity or authority, where required for security, fraud prevention, compliance, or account administration.

2.3 Subscription and Service Information

• Bundle selection, Base Bundle, Add-Ons, upgrades, downgrades, trials, and plan configuration
• Services selected through Bundled
• Service activation status
• Renewal dates
• Billing status
• Account state, usage indicators, and service-management history
• Information about provider-side plans, pricing, offers, or account configurations relevant to the Services

2.4 Credentials and Managed Access Information

To operate Bundled's managed subscription model, we may collect, generate, maintain, or process:

• Bundled-issued usernames or email aliases,
• provider-specific login identifiers,
• passwords,
• one-time passcodes,
• password reset links,
• security prompts,
• account verification messages,
• and related access or account-administration data.

2.5 Payment and Transaction Information

• Payment method type
• Limited payment information
• Billing ZIP code
• Transaction history
• Subscription charges
• Credits, adjustments, and rewards-related transaction information

If you make a purchase through the Services, your payment card details are generally collected and processed by our third-party payment processors and not stored in full on our servers, except as needed through tokenized or limited payment data for billing and account management.

2.6 Communications and Support Information

• Messages you send to us
• Support tickets
• Help requests
• Survey responses
• Chat content
• Emails or texts you send or receive in connection with the Services
• Notes or records relating to customer support interactions

2.7 Provider and Task-Execution Information

When you authorize Bundled to manage subscriptions or interact with providers on your behalf, we may collect or generate:

• account numbers,
• service addresses,
• plan details,
• billing records,
• account status,
• service provider responses,
• cancellation confirmations,
• reactivation records,
• retention-offer records,
• downgrade or upgrade records,
• and similar service-administration information.

2.8 Device, Usage, and Technical Information

• IP address
• Device identifiers
• Browser type
• Operating system
• App version
• Timestamps
• Pages visited
• Clicks, taps, and navigation behavior
• Referring URLs
• Crash logs
• Error logs
• Performance metrics
• Approximate location inferred from IP address

2.9 Marketing and Engagement Information

• Whether you open emails
• Whether you click links
• Campaign engagement
• Sign-up source
• Referral source
• And similar interaction data

2.10 Rewards and Referral Information

• Rewards status
• Tier progress
• Reward accrual and redemption history
• Referral activity
• Referral eligibility
• Fraud or abuse review data related to rewards or referrals

2.11 Linked Financial Account Information

If you choose to connect financial accounts through a third-party financial data provider such as Plaid, we may receive, subject to your permissions and the products enabled:

• account holder information,
• account details,
• account type,
• balances,
• transaction history,
• recurring transaction patterns,
• credit account details,
• and related financial account metadata.

2.12 Other Information You Provide

We may collect any other information you choose to provide to us, upload to the Services, or authorize us to use in connection with your account or service-management requests.

2.13 Information Received Through Bundled Endpoints

Because Bundled-issued email aliases, phone numbers, and similar endpoints are owned and operated by Bundled, communications transmitted to those endpoints are received by Bundled in the ordinary course of our operations. These communications may contain information about you, about other people on a household plan or profile, or about transactions and accounts. We process such communications to deliver the Services and consistent with this Privacy Policy. By using the Services, you consent to our receipt and processing of communications addressed to Bundled-issued endpoints, and you authorize us, to the extent permitted by law, to consent on your behalf to recording, transcription, or analysis of communications conducted between Bundled and Third-Party Service Providers on your behalf where consent of a party to the communication is required.

3. Information We Collect from Other Sources

3.1 Third-Party Service Providers You Ask Us to Interact With

When you authorize Bundled to act on your behalf, we may receive information from subscription providers, payment-related systems, customer support channels, or account interfaces, including plan details, billing information, service status, verification messages, and provider-side account activity.

3.2 Authentication, Identity, and Payment Partners

We may receive information from vendors that assist with payments, fraud prevention, account security, identity verification, risk scoring, and authentication.

3.3 Analytics, Infrastructure, and Support Vendors

We may receive usage, device, performance, or account-support-related information from service providers that help us operate the Services.

3.4 Referral or Sponsorship Sources

If you sign up through a referral, employer, property management partner, distribution partner, or similar sponsorship or referral arrangement, we may receive limited information from that source to verify your eligibility or support the relevant offering.

3.5 Public or Lawfully Available Sources

Where appropriate, we may use public or lawfully available information for fraud prevention, compliance, identity validation, or service operations.

3.6 Financial Data Providers and Connected Accounts

If you choose to link a financial account through a provider such as Plaid, we may receive financial account information from that provider or from your financial institution through that provider, subject to the permissions you grant and the products enabled. This may include information relating to multiple linked accounts accessible through one credential set, such as checking, savings, and credit card accounts.

4. Linked Financial Accounts and Plaid

We may offer features that allow you to connect your financial accounts through third-party financial data providers, such as Plaid, in order to identify recurring subscription charges, detect services you may want Bundled to manage, simplify onboarding, and improve the Services.

If you choose to connect a financial account through such a provider, we may receive, with your permission and subject to the permissions you grant:

• account holder information,
• account details,
• account type,
• balance information,
• transaction history,
• recurring transaction patterns,
• and related financial account metadata.

We may use this information to:

• identify recurring subscription or membership charges,
• suggest subscriptions or services that may be eligible for Bundled management,
• help you move selected subscriptions into Bundled,
• personalize your onboarding and recommendations,
• improve subscription detection, categorization, and account-management features,
• and support fraud prevention, troubleshooting, and product analytics.

Plaid's collection and use of your information is described in Plaid's End User Privacy Policy, available at https://plaid.com/legal/. Plaid is a third party that operates independently of Bundled, and Plaid's data practices are not controlled by this Privacy Policy.

Financial data providers such as Plaid may independently collect, use, and disclose your data in accordance with their own privacy policies and end-user disclosures. Your use of account-linking functionality is also subject to the terms and privacy practices of those providers.

If you connect a financial account through one set of credentials, the data made available may include information relating to multiple accounts accessible through those credentials, depending on the provider and permissions granted.

5. Information We Collect Automatically

We and our service providers may automatically collect information about your interactions with the Services using cookies, pixels, SDKs, APIs, local storage, log files, and similar technologies.

This may include:

• device and browser data,
• pages or screens viewed,
• session duration,
• clicks, taps, and navigation behavior,
• performance and error logs,
• email engagement data,
• and general analytics regarding how the Services are used.

We use this information to operate the Services, secure the Services, analyze performance, improve functionality, troubleshoot issues, personalize your experience, and support legitimate business operations.

6. How We Use Personal Information

6.1 To Provide and Operate the Services

• Create and maintain your account
• Authenticate you
• Process sign-up and enrollment
• Issue Bundled-managed credentials
• Manage your membership
• Provide support
• Operate the Services

6.2 To Manage Subscriptions and Act on Your Behalf

• Create, access, maintain, modify, pause, downgrade, restart, reactivate, or cancel eligible services
• Communicate with providers on your behalf
• Manage billing and account settings
• Handle trials, upgrades, and add-ons
• Otherwise perform actions you authorize us to take

6.3 To Process Payments and Billing

• Process recurring or one-time payments
• Charge your payment methods
• Manage failed payments
• Issue credits or adjustments
• Prevent fraud
• Maintain transaction records

6.4 To Operate Managed Credentials and Email Alias Functions

• Create and maintain Bundled-issued usernames or aliases
• Receive and process verification messages
• Support account login
• Manage access and security flows
• Facilitate provider-side account administration

6.5 To Optimize and Personalize the Services

• Personalize bundles, plans, offers, and experience
• Provide relevant account-management suggestions
• Tailor communications
• Improve product flows

6.6 To Monitor, Improve, and Develop the Services

• Analyze performance
• Troubleshoot issues
• Conduct internal analytics
• Improve user experience
• Refine workflows
• Support product development

6.7 To Administer Rewards, Referrals, Promotions, and Trials

• Determine eligibility
• Calculate rewards and tiers
• Process referrals
• Enforce promotional terms
• Prevent fraud or abuse

6.8 To Communicate With You

• Send service notices
• Billing confirmations
• Reminders
• Security alerts
• Support messages
• Legal notices
• Promotional messages
• Updates about the Services

6.9 To Support Linked Financial Account Features

• Identify recurring subscription or membership charges
• Detect subscriptions you may want to move to Bundled
• Help onboard selected subscriptions into Bundled
• Personalize subscription recommendations and onboarding
• Support analytics, fraud prevention, and troubleshooting relating to connected accounts

6.10 To Protect Rights, Safety, and the Services

• Detect and prevent fraud, abuse, harassment, manipulation, chargebacks, unauthorized access, and other prohibited conduct
• Enforce our Terms of Use
• Protect users, providers, partners, and Bundled
• Investigate claims or disputes

6.11 To Comply With Legal Obligations

• Comply with legal process
• Respond to law enforcement or regulatory requests
• Maintain legally required records
• Satisfy tax, accounting, audit, and compliance obligations
• Exercise or defend legal claims

7. AI and Automated Processing

Bundled may use artificial intelligence, automated systems, scripts, bots, and related technologies to support account management, workflow execution, communications, issue detection, and service optimization.

We do not use your personal information to train public-facing general-purpose AI models unless we specifically disclose that practice and obtain any consent required by applicable law.

We may use AI and automation to:

• Support customer support and workflow efficiency
• Process and route requests
• Detect patterns relevant to subscription management
• Assist with account or billing operations
• Generate task-related outputs

Because automated systems can make errors, you should review information provided through the Services where review is available and contact us if you believe something is inaccurate.

8. How We Disclose Personal Information

8.1 Service Providers and Vendors

We disclose personal information to vendors and service providers that help us operate the Services, including providers of hosting, analytics, payment processing, customer support, communications, security, authentication, identity verification, infrastructure, and product tooling. These vendors are contractually restricted to using personal information only for the purposes for which we disclose it to them.

8.2 Subscription Providers and Other Third Parties You Ask Us to Interact With

When you authorize us to act on your behalf, we may disclose personal information to subscription providers and other third parties as necessary to perform the requested actions, including account verification, plan changes, billing administration, cancellations, trials, restarts, and related account management.

Third-Party Service Providers receive personal information about you in their capacity as independent third parties, and they process that information for their own purposes under their own privacy policies. They are not service providers, processors, or contractors of Bundled, and Bundled does not control their processing of personal information you direct us to disclose to them on your behalf.

8.3 Payment, Banking, and Issuing Partners

We may disclose personal information to payment processors, payment facilitators, issuing or banking partners, and fraud-prevention partners in connection with billing, payment authorization, and use of Bundled-controlled payment instruments. This includes our acquiring, issuing, and processing partner Stripe, Inc. and its affiliates.

8.4 Financial Data Providers

We may disclose personal information to financial data providers and connectivity partners, such as Plaid, in connection with account-linking, transaction retrieval, recurring subscription detection, connected-account onboarding, and related subscription-management functionality.

8.5 Professional Advisors and Business Counterparties

We may disclose personal information to attorneys, auditors, insurers, consultants, advisors, and similar recipients as reasonably necessary for business, legal, compliance, or transaction purposes.

8.6 Legal Authorities and Others for Legal Reasons

We may disclose personal information when we believe in good faith that doing so is necessary to:

• Comply with law or legal process
• Protect rights, property, or safety
• Enforce our agreements
• Prevent fraud or abuse
• Respond to lawful government requests

8.7 Corporate Transactions

We may disclose or transfer personal information in connection with an actual or proposed merger, financing, acquisition, sale of assets, bankruptcy, reorganization, or other corporate transaction.

8.8 Affiliates

We may disclose personal information to our affiliates for purposes consistent with this Privacy Policy.

8.9 Advertising and Analytics Partners

As described in Section 13.4, we use third-party advertising and analytics technologies (including pixels, tags, and SDKs) on our website and in our App for marketing measurement, conversion attribution, and prospect outreach on third-party platforms. These technologies cause certain online identifiers and interaction data to be transmitted to the providers of those technologies. Under California, Colorado, Connecticut, Virginia, Oregon, Texas, and other state laws, this activity may constitute “sharing” of personal information for cross-context behavioral advertising, or “sale,” or “targeted advertising.” You may opt out as described in Section 13.4.

9. Cookies, Similar Technologies, and Privacy Preferences

We and our service providers may use cookies, pixels, SDKs, and similar technologies to:

• Keep you logged in
• Remember preferences
• Support core functionality
• Measure engagement
• Analyze traffic and performance
• Improve the Services
• Support advertising and marketing-measurement features

You may be able to control certain cookies through your browser or device settings. Blocking some cookies may impact the functionality of the Services.

Where available, you may also manage cookie, analytics, advertising, and privacy preferences through your browser settings, device settings, the consent banner displayed on the Bundled website, or privacy settings made available through your Bundled account. Some features may not function properly if certain technologies are disabled.

10. Data Retention

We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

• Provide the Services
• Maintain your account
• Fulfill transactions
• Support subscription management
• Administer rewards or referrals
• Comply with legal obligations
• Resolve disputes
• Prevent fraud
• Enforce our agreements

Retention periods vary based on the type of information and the reason we hold it. In some cases, we may retain information after account closure where necessary for legal, tax, accounting, fraud-prevention, security, or recordkeeping purposes.

We may also de-identify or aggregate information and retain it in that form where permitted by law.

If you request account deletion, we will delete or de-identify eligible personal information in accordance with applicable law. We may retain certain information after deletion requests to comply with legal obligations, resolve disputes, enforce agreements, prevent fraud, maintain security, complete ongoing transactions, or preserve legally permitted business records.

11. Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information, with controls tailored to the sensitivity of the information involved. These measures may include encryption in transit and at rest where appropriate, role-based access controls, multi-factor authentication for administrative access, logging and monitoring, vendor management procedures, and internal information-security policies aligned with applicable U.S. data-security frameworks, including the FTC Safeguards Rule where relevant to nonpublic personal information we receive in connection with linked financial accounts.

However, no system is completely secure, and we cannot guarantee absolute security. You are responsible for helping protect your own account credentials and for notifying us promptly if you suspect unauthorized activity.

12. Your Choices

12.1 Account Information

You may access, update, or correct certain account information through your account settings or by contacting us.

12.2 Marketing Communications

You may opt out of marketing emails by using the unsubscribe link in those messages. Even if you opt out of marketing, we may still send you transactional or service-related communications, including notices about your account, billing, security, legal terms, subscription changes, privacy rights, and service administration.

12.3 Cookies and Similar Technologies

You may control certain cookies through your browser or device settings, the consent banner on the Bundled website, or your Bundled account settings, subject to functionality limitations.

12.4 Linked Financial Accounts

If you connect a financial account through a third-party provider such as Plaid, you may be able to disconnect that connection through Bundled, the provider's portal, or your financial institution, depending on the integration and product used. Disconnecting a linked account may limit Bundled's ability to identify subscriptions, monitor recurring charges, or provide certain managed-service features.

12.5 Account Closure

You may request account deletion or closure through the methods we make available. We may retain certain information as required or permitted by law.

12.6 Managed Credentials and Provider Accounts

If you stop using the Services, close your account, or transfer billing away from Bundled, you may need to update login credentials, payment methods, and account settings directly with the relevant providers in order to continue using those services.

13. U.S. State Privacy Rights

Depending on where you live, you may have rights under applicable U.S. state privacy laws, which may include the right to:

• Know or access certain personal information we collect about you
• Request deletion of certain personal information
• Request correction of inaccurate personal information
• Obtain a copy of certain personal information in a portable format
• Opt out of certain processing activities such as targeted advertising, sale, sharing, or profiling, where applicable
• Limit the use and disclosure of sensitive personal information, where applicable
• Appeal certain decisions regarding your privacy rights requests, where applicable
• Not be discriminated against for exercising your privacy rights

We will not discriminate against you for exercising privacy rights granted by law.

13.1 Privacy Rights Requests, Verification, Appeals, and Authorized Agents

To exercise available privacy rights, contact us using the information in the “Contact Us” section below or through the privacy preferences mechanisms available through the Services. We may need to verify your identity before responding.

You may use an authorized agent where permitted by law, subject to verification of both your identity and the agent's authority.

If we deny your request, you may have the right to appeal that decision under applicable law. To submit an appeal, contact us using the “Contact Us” section and include enough information for us to identify your original request and our response.

13.2 California Notice at Collection / California Privacy Disclosures

If you are a California resident, the categories of personal information we may collect and the purposes for which we use them are described in Sections 2 through 6 of this Privacy Policy. A separate Notice at Collection is presented at or before the point of collection (such as at signup) and is available through the privacy choices link in the footer of our website.

We may disclose the categories of personal information described above to the categories of recipients described in Section 8 for the business and commercial purposes described in this Privacy Policy.

We retain personal information for the periods described in Section 10.

13.3 Sensitive Personal Information

Sensitive personal information we collect may include: (a) government identifiers (such as date of birth and, where collected, government-issued identification numbers) used for identity verification, fraud prevention, and compliance; and (b) account credentials, including passwords or other authentication information, used to provide the Services. We use this sensitive personal information solely for the purposes set forth in California Code of Regulations Title 11, section 7027(m) (or its successor provisions) and equivalent provisions of other state laws — namely, to perform the Services, ensure security and integrity, prevent fraud, verify identity, and comply with law. Accordingly, the right to limit use and disclosure of sensitive personal information under applicable state law does not apply to our use of this sensitive personal information.

13.4 Sale, Sharing, and Targeted Advertising

Bundled does not sell personal information in exchange for monetary consideration. However, Bundled uses third-party advertising and analytics technologies on its website and in its App — including pixels, tags, and software development kits provided by advertising and analytics platforms (such as Meta) — to measure marketing performance, attribute conversions, and reach prospective members through advertising on third-party platforms. These technologies cause certain online identifiers and interaction data to be transmitted to the third-party platforms that operate them. Under the California Consumer Privacy Act (as amended by the CPRA) and similar laws in Colorado, Connecticut, Virginia, Oregon, Texas, and other states, this activity may constitute “sharing” of personal information for cross-context behavioral advertising, or “sale” or “targeted advertising,” in each case as defined by the applicable statute.

You may exercise the right to opt out of this sharing or targeted advertising by using the “Your Privacy Choices” link available in the footer of our website and in your account settings, or by sending a recognized opt-out preference signal such as the Global Privacy Control through your browser. Bundled honors GPC and equivalent universal opt-out signals where required by applicable law. Bundled does not knowingly engage in the sale, sharing, or targeted advertising of personal information of consumers under sixteen (16) years of age.

13.5 Universal Opt-Out Mechanisms

To the extent required by applicable law, Bundled will recognize browser-based or device-based universal opt-out preference signals, including the Global Privacy Control, for targeted advertising or sale/sharing of personal information where such signals are legally required to be honored and technically supported by our systems.

13.6 Shine the Light

California residents may request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes, if any, by contacting us.

13.7 Not a Data Broker

Bundled is not a “data broker” as defined under California Civil Code Section 1798.99.80 or similar laws in other states. We do not knowingly engage in the sale of personal information to third parties with which the consumer does not have a direct relationship.

14. Children

The Services are intended only for users 18 years of age or older, consistent with our Terms of Use. Bundled does not knowingly collect personal information from anyone under 13 in violation of the Children's Online Privacy Protection Act, and we do not knowingly collect personal information from anyone under 18. If you believe a person under 18 has provided personal information to Bundled, please contact us at privacy@gobundled.com and we will take appropriate steps to delete it.

15. U.S.-Only Service; No International Targeting

Bundled is a U.S.-based service offered only to individuals located in and resident in the United States. Personal information is collected and processed in the United States. We do not target the Services at, market the Services to, or knowingly accept users from outside the United States, and Bundled does not intend to subject itself to the privacy or consumer-protection regimes of any jurisdiction outside the United States. If you are accessing the Services from outside the United States, you must stop using the Services.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the “Last Updated” date and may provide additional notice where appropriate. Your continued use of the Services after an updated Privacy Policy becomes effective means you acknowledge the revised Privacy Policy, to the extent permitted by law.

17. Contact Us

If you have questions about this Privacy Policy or our privacy practices, or if you want to exercise available privacy rights, contact us at:

Bundled Global Inc.
Privacy Email: privacy@gobundled.com
Support Email: hello@gobundled.com
Address: 838 Walker Rd., Suite 21-2, Dover, Delaware, 19904, County of Kent