Privacy Policy

Last updated on June 21st 2023

General Terms

Welcome, and thank you for your interest in Bundled.Inc. (“Bundled”, “us” or “we”) and our services made available through the websites on which a link to this Privacy Policy is displayed, including “Site”), the downloadable applications through which this Privacy Policy is made available (collectively, the “Apps,” together with the Site, the “Service”).

This Privacy Policy describes the information that we collect about you, how we use and share your information, and the steps we take to protect your information. 

This Privacy Policy is incorporated into and is subject to the Bundled Terms of Use. By using the Service, you agree to the privacy practices described in this Privacy Policy, to our Terms of Service, and any other policies made available by us to you. Capitalized terms that are not defined in the Privacy Policy have the meaning given to them in the Bundled Terms of Service. 

Bundled is intended ONLY for users in the United States, United Kingdom, Canada & India, and its use is governed by the laws based on your country of purchase.

Information We Collect

A. User-Provided Information‍

When you use the Service, you may provide and we collect information, such as your name, email address, mailing address, phone number, and other information. For example, you may provide us with information when you fill out forms or fields on our Site, when you participate in online surveys, when you use or redeem savings (e.g., discounts on partner products and services), when you apply for a job, when you contact us or request information about our Service (including by email or other means), when you submit User Content, and when you register for an account. The categories of information we collect include:

In addition, if you submit a job application, we collect certain information in order to consider you for our open positions, such as your name, email address, city of residence, phone number, and your employment and education history.

You may choose to voluntarily provide other information to us that we do not request, and, in such instances, you are solely responsible for such information. 

B. User-Provided Information Through Plaid and Other Third Party Integrations

Our Service may allow you to connect your third party accounts, including your financial accounts, to your Bundled account. We may use Plaid and other third party integrations to provide this functionality to you. In order to connect your third party accounts to your Bundled account, you must expressly authorize such connection when first registering your Bundled account or at a later time through your account settings. You may terminate this connection at any time through your account settings. 

When you connect your third party accounts to your Bundled account, you give Bundled and the third party integration the authority to act on your behalf to access and transmit your information from the relevant bank or other entity that provides your accounts. The information we receive from the entities that maintain your accounts varies depending on the information made available by those entities. Examples of the types of information we receive from financial accounts include financial account information, information about account balance, information about credit accounts, information about loan accounts, information about investment accounts, identifiers and information about account owners, information about account transactions, and employment information. 

Please note that Bundled is not responsible for any third party’s privacy practices and we strongly encourage you to review their privacy policies before connecting your third party accounts with your Bundled account. You are responsible for the accuracy and completeness of the data provided through any third parties you connect to the Service.

C. Automatically Collected Information

When you use the Service or open one of our HTML emails, we (or our service providers or vendors) automatically collect certain information from your web browser and through your device by using different types of technology, including “cookies,” “log files,” "pixels," and other tracking technologies. This automatically collected information includes:

The types of tracking technologies used include: 

For further information on how we use tracking technologies for analytics and advertising, and your rights and choices regarding them, see the “Analytics and Advertising” and “Your Rights and Choices” sections below. 

E. Information from Other Sources

We also collect information from sources other than the Service, such as:


We treat the information collected from other sources subject to any laws or contractual obligations applicable to us. In the event we are permitted to process the information for our own purposes, we will process the information in accordance with the practices described in this Privacy Policy. 

How We Use Information 

Your information is an integral part of our operations, and we use it in a variety of ways in providing the Service and operating our other business and commercial purposes. We use the information we collect about you for the following purposes:


Notwithstanding the above, we may use information that does not identify you (including information that has been aggregated or de-identified) for any purpose except as prohibited by applicable law. For information on your rights and choices regarding how we use information about you, please see the “Your Rights and Choices” section below.

When We Disclose Information

We disclose information we collect in accordance with the practices described in this Privacy Policy. The categories of parties with whom we share information include:

 Notwithstanding the above, we may share information that does not identify you (including information that has been aggregated or de-identified) except as prohibited by applicable law. For information on your rights and choices regarding how we share information about you, please see the “Your Rights and Choices” section below.

Analytics and Advertising

We use analytics services, such as Amplitude, to help us understand how users access and use the Service. In addition, we work with agencies, advertisers, ad networks, and other technology services to place ads about our products and services on other websites and services. For example, we place ads through Google and Facebook that you may view on their platforms as well as on other websites and services. 

As part of this process, we may incorporate tracking technologies into our own Service (including our Site, Apps, and emails) as well as into our ads displayed on other websites and services. Some of these tracking technologies may track your activities across time and services for purposes of associating the different devices you use, and delivering relevant ads and/or other content to you (“Interest-based Advertising”).

We also use audience matching services to reach people (or people similar to people) who have visited our Service or are identified in one or more of our databases (“Matched Ads”). This is done by us uploading a customer list to another party or incorporating a pixel or SDK from another party into our own Service, and the other party matching common factors between our data and their data or other datasets. For instance, we incorporate the Facebook SDK on our Service and may share your email address with Facebook as part of our use of Facebook Custom Audiences. 

As indicated above, vendors and other parties may act as our service providers, or in certain contexts, independently decide how to process your information.

For further information on the types of tracking technologies we use on the Service and your rights and choices regarding analytics, Interest-based Advertising, and Matched Ads, please see the “Information Collected Automatically” and “Your Rights and Choices” sections.

Your Rights and Choices

You may, of course, decline to share certain information with us, in which case we may not be able to provide to you some of the features and functionality of the Service. Below is further information regarding your rights and choices for the Service:


Please note that if you opt out using any of these methods, the opt out will only apply to the specific browser, device, account, email address, and/or phone number from which you opt out. It will not affect subsequent subscriptions (where applicable). We are not responsible for any other entities’ effectiveness of, or compliance with, any opt out options or programs, or the accuracy of their statements regarding their opt out options or programs.

Third Parties

The Service may contain features or links to websites and services provided by other parties. In addition, we integrate technologies operated or controlled by other parties into parts of our Service. Some examples include:


Any information you provide on another party’s sites or services is provided directly to that party and is subject to that party’s policies and practices regarding privacy and security, even if accessed through the Service. We encourage you to learn about third parties’ privacy and security policies before providing them with information.

Children's Privacy

The Service is intended for general audiences and is not directed at anyone under the age of 18. For that reason, we don't allow anyone under the age of 18 to use the Service or knowingly collect personal information (as defined by the U.S. Children’s Privacy Protection Act, or “COPPA”) from anyone under the age of 18. If you are under 18 years of age, please do not use or access the Service at any time or in any manner. If we learn that personal information has been collected on the Service from children, we will take the appropriate steps to delete this information in accordance with COPPA. If you are a parent or guardian and discover that your child has obtained an account on the Service or provided us with personal information, you may submit a request to our Privacy Request Form to request that we delete the personal information from our systems. We will remove the personal information in accordance with COPPA.

Data Security

We use certain physical, managerial, and technical safeguards that are designed to improve the integrity and security of your information. Nevertheless, transmission via the internet is not completely secure and we cannot ensure or warrant the security of any information you transmit to us or store on the Service and you do so at your own risk. We also cannot guarantee that such information will not be accessed, disclosed, altered, or destroyed by breach of any of our physical, technical, or managerial safeguards.

International Transfers

The Service is hosted in the United States and is intended solely for users located within and are residents of the United States. Your use of the Service, or provision of any information on the Service, is your consent to the transfer, storage, usage, sharing, and processing of information about you in the U.S. and other jurisdictions as setout in this Privacy Policy.

Changes and Updates to this Privacy Policy

Please revisit this page periodically to stay aware of any changes to this Privacy Policy, which may be revised periodically at our sole discretion. In the event that a change to the Privacy Policy materially modifies your rights or obligations, we may provide additional notice to your email address or through Service. Any changes are effective upon publication of the revised Privacy Policy. Your continued use of our Service indicates your consent to the Privacy Policy then posted. For the avoidance of doubt, disputes arising hereunder will be resolved in accordance with the Privacy Policy in effect at the time the dispute arose.

Our Contact Information

Please contact us with any questions or comments about this Privacy Policy, your information, our use and disclosure practices, or your consent choices by email at

This Privacy Policy has been designed to be accessible to people with disabilities. If you experience any difficulties accessing the information here, please contact us by emailing us at

Additional Disclosures for Nevada Residents

Nevada law (NRS 603A.340) requires each business to establish a designated request address where Nevada consumers may submit requests directing the business not to sell certain kinds of personal information that the business has collected or will collect about the consumer. A sale under Nevada law is the exchange of personal information for monetary consideration by the business to a third party for the third party to license or sell the personal information to other third parties. If you are a Nevada consumer and wish to submit a request relating to our compliance with Nevada law, please contact us at

Additional Disclosures for California Residents

These additional disclosures apply only to California residents. The California Consumer Privacy Act of 2018 (“CCPA”)provides additional rights to know, delete and opt-out, and requires businesses collecting or disclosing personal information to provide notices and means to exercise rights.

A. Notice of Collection

In the past 12 months, we have collected the following categories of personal information enumerated in the CCPA: 


For further details on information we collect, including the sources from which we receive information, review the “Information We Collect” section above. We collect and use these categories of personal information for the business purposes described in the “How We Use Information” section above, including to manage our Service.

We do not generally sell information as the term “sell” is traditionally understood. To the extent “sale” under the CCPA is interpreted to include the activities set out in this Privacy Policy, such as those disclosed in the “Analytics and Advertising” section above, we will comply with applicable law as to such activity. We disclose the following categories of personal information for commercial purposes: identifiers, characteristics, commercial or transactions information, internet activity, geolocation data, and inferences drawn. Please review the “When We Disclose Information” section above for further details about the categories of parties with whom we share information.

B. Right to Know and Delete

You have the right to know certain details about our data practices in the past 12 months. In particular, you may request the following from us:


In addition, you have the right to delete the personal information we have collected from you.

‍C. Right to Opt-Out.

To the extent Bundled sells your personal information as the term “sell” is defined under the CCPA, you have the right to opt-out of the sale of your personal information by us to third parties at anytime. You may submit a request to opt-out by clicking Do Not Sell My Personal Information.

D. Authorized Agent.

You can designate an authorized agent to submit requests on your behalf. However, we will require written proof of the agent’s permission to do so and verify your identity directly. 

E. Right to Non-Discrimination. 

You have the right not to receive discriminatory treatment by us for the exercise of any your rights. 

F. Shine the Light. 

Customers who are residents of California may request (i) a list of the categories of personal information disclosed by us to third parties during the immediately preceding calendar year for those third parties’ own direct marketing purposes; and (ii) a list of the categories of third parties to whom we disclosed such information. To exercise a request, please write us at the email or postal address set out in “Our Contact Information” above and specify that you are making a “California Shine the Light Request.” We may require additional information from you to allow us to verify your identity and are only required to respond to requests once during any calendar year.