Articles on: Privacy & Security

How Bundled protects your data

Your personal data is one of the things Bundled handles carefully. Here's how we approach security and privacy.


What we collect


To set up your account and manage your subscriptions, we collect:


  • Account info — name, email, password, billing address, phone (for SMS notifications and verification)
  • Payment information — handled through Stripe, our payment processor (we don't store full card numbers)
  • Identity information — date of birth and certain government-issued identifiers, when required to enroll you with subscription providers
  • Subscription activity — billing and account status data from providers in your bundle
  • Usage and engagement data — to power features like no-click cancellations
  • Device and technical info — when you use our website or app


A more detailed breakdown is in our Privacy Policy.


How we secure it


  • Encryption in transit and at rest — all your data is encrypted end-to-end
  • Role-based access controls — only authorized Bundled team members can access account data, and only when necessary
  • Multi-factor authentication required for internal staff access
  • Logging and audit trails for all data access
  • Compliance with FTC Safeguards Rule for linked financial account data


We follow security standards appropriate to our size and the financial nature of our service. Our security program is reviewed regularly.


How we use your data


We use your data to:


  • Set up and run your subscriptions on your behalf
  • Bill you and manage your account
  • Power features like trial protection and no-click cancellation
  • Provide customer support
  • Improve Bundled and develop new features
  • Comply with legal obligations (tax reporting, anti-fraud, regulatory)


We do not use your personal information to train public-facing general AI models. We may use AI internally for automation and customer support — see our Privacy Policy Section 7 for details.


Who we share your data with


We share your data with:


  • Subscription providers in your bundle — name, payment info, and account credentials needed to enroll you
  • Stripe — our payment processor, for handling charges and refunds
  • Plaid (if you've connected a bank account) — for detecting subscriptions you may want to add
  • Service providers we engage for operations (hosting, support tools, analytics) — under contractual restrictions on use
  • Legal and regulatory bodies when required by law


We don't sell your personal information for money to third parties.


Cookies and advertising


We use third-party advertising and analytics tools (Meta Pixel, similar tools) for marketing measurement and outreach. Under some state laws, this counts as "sharing" of personal information for cross-context behavioral advertising.


You can opt out of this sharing at gobundled.com/do-not-sell or by sending a Global Privacy Control signal through your browser.


What we don't see


We don't read or store the content of what you watch, listen to, or do inside services:


  • We don't see what shows you watch on Netflix
  • We don't see what playlists you make on Spotify
  • We don't read what's in your Notion workspaces or Calm journal
  • We don't see your messages or personal content in any app


We see engagement signals (whether you've been logging into a service recently, billing status, plan tier) — not content.


Linked financial accounts


If you connect a bank account through Plaid (to help us detect existing subscriptions), Plaid processes that connection — Bundled doesn't see your bank login or password. Plaid's own privacy practices apply to that data flow.


We receive transaction data from Plaid only to identify subscription charges. We don't see your full bank statement or non-subscription transactions.


Your privacy rights


Depending on your state, you may have rights including:


  • Access — request a copy of the data we have about you
  • Deletion — request that we delete certain data
  • Correction — fix inaccurate data
  • Opt-out of sale, sharing, or targeted advertising
  • Portability — receive a copy of certain data in a portable format


To exercise any of these rights, visit gobundled.com/do-not-sell or email [email protected].


Children


Bundled is for users 18 and older. We don't knowingly collect personal information from anyone under 13, and we don't knowingly target advertising to anyone under 16.


Questions about privacy




Updated on: 05/06/2026

Was this article helpful?

Share your feedback

Cancel

Thank you!