Privacy Policy

1. Introduction

Thank you for using Lux ("we", "us", "our", or the "App"), developed by Webiots. We take the privacy of our merchants seriously and are committed to maintaining the trust and security of your data.

This Privacy Policy describes what information we collect when you install and use the Lux Shopify Application, how that information is used, protected, and stored, and your rights under applicable privacy laws, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), and PIPEDA.

By installing or using Lux, you acknowledge and agree to the practices outlined in this Privacy Policy.

2. Scope

This policy applies to the Lux application accessed via the Shopify App Store, its embedded merchant administration panel, background media services, and associated APIs. It does not apply to third-party software, themes, or independent services you choose to integrate with your Shopify store.

3. Information We Collect

To provide our AI visual generation and media optimization features, we collect the minimum necessary data from merchants:

Merchant & Store Information

• Store Identifiers: Shopify store domain (e.g. your-shop.myshopify.com), primary domain URL, and unique Shopify Shop ID.
• Contact Details: Store administrator name and email address provided through the Shopify authorization grant.
• Subscription & Billing Data: Selected plan tier (Free, Starter, Growth, Pro), credit balances, and transaction references processed securely via Shopify's Billing API.

Media Assets & Operation Data

• Store Images: Product images, collection photos, blog article visuals, and files that you explicitly select for generation, resizing, compression, watermarking, alt-text optimization, or background removal.
• Generated Media: High-resolution AI visuals and videos generated upon your request.
• Operational Metadata: Generation prompts, style presets, watermark settings, resizing dimensions, compression parameters, and history records.

4. Customer Data Commitment

Our app operates solely on merchant-managed media assets (products, collections, files, and visuals) and does not interact with checkout sessions, customer accounts, or order fulfillment details.

5. How We Use Your Data

We use the data collected strictly for the following operational and business purposes:

• Deliver Visual Studio Tools: Powering AI image and video generation, background isolation, automated compression, resizing, file renaming, and watermark placement.
• Asset Management & History: Providing a history log of recent generations and allowing one-click publishing of created visuals directly back to your Shopify products or files.
• Non-Destructive Rollback: Storing backup records to enable the "Restore Original" feature whenever you wish to revert watermarks, compression, or resizes.
• Account & Billing Administration: Tracking credit balances, authenticating your session, and managing plan tiers via Shopify.
• Customer Support & Service Health: Troubleshooting issues, monitoring uptime, and communicating important technical updates.

6. AI Processing & Third-Party Service Providers

We do not sell or rent your data to any third party. We share data only with trusted infrastructure and AI processing partners strictly necessary to operate our service:

• Cloud Infrastructure: High-security cloud hosting and database systems with encrypted data storage.
• AI Model Engines: State-of-the-art vision models (e.g. OpenAI, Stability, and specialized diffusion models) used solely to execute prompts and image transformations initiated by you.
• Shopify API: Communicating with Shopify to read and update selected product images, alt tags, and file assets.

All third-party vendors are bound by strict confidentiality and data protection agreements. Your store media and creative prompts are not used to train public machine-learning models without your explicit consent.

7. Data Storage, Security & Retention

We implement robust technical and organizational security protocols to protect your media and store information:

• Encryption: All data transmitted between your browser, Shopify, and our servers is encrypted using industry-standard TLS/HTTPS protocols. Data at rest is encrypted within secure databases.
• Access Controls: System access is strictly restricted to authorized operational staff via multi-factor authentication.
• Data Retention: We retain your merchant settings and generated media for the duration of your active installation. If you uninstall Lux, your stored data, generation cache, and credentials are automatically scheduled for permanent deletion within 48 hours to 60 days, in compliance with Shopify App requirements and applicable laws.

8. Fair Usage and Abuse Prevention

Prohibited behaviors include, but are not limited to:

• Attempting to gain unauthorized tokens or credits through loopholes, scripts, software bugs, or unintended system behavior.
• Repeatedly subscribing, canceling, or manipulating billing cycles in order to obtain more credits than intended by the selected tier.
• Using automated bots, scrapers, or reverse-engineered calls to bypass usage quotas or rate limits.

We reserve the right to monitor usage patterns and take appropriate action in cases of suspected abuse, which may include voiding improperly obtained credits, temporarily throttling access, or suspending services without prior notice.

9. GDPR, CCPA & Global Merchant Rights

If you are located in the European Economic Area (EEA), the United Kingdom, California, or regions with comparable privacy legislation, you have guaranteed statutory rights over your personal data:

• Right to Access: Request a complete copy of the store information and records we hold about your account.
• Right to Rectification: Request correction of inaccurate or incomplete merchant data.
• Right to Erasure ("Right to be Forgotten"): Request full deletion of your store records and media assets from our servers.
• Right to Data Portability: Obtain your data in a structured, machine-readable format.
• Right to Restrict or Object: Restrict or object to certain aspects of processing where applicable.

To exercise any of these rights, please contact our Data Protection Officer at support@webiots.com. Requests are responded to within 30 days without charge.

10. Shopify Compliance & Mandatory Webhooks

Lux is built in full compliance with Shopify's partner guidelines. We actively listen to and process Shopify's mandatory privacy webhooks:

• customers/data_request: We do not store end-customer information. However, upon receiving this webhook, our systems verify and confirm zero customer data retention.
• customers/redact: Verifies customer records and confirms no customer records are held.
• shop/redact: When a store owner requests full shop redaction, all merchant records, settings, and media logs for that shop are permanently purged within 48 hours.
• app/uninstalled: Immediately revokes API access tokens and queues stored data for timely deletion.

11. Children’s Privacy

Lux is a B2B commercial utility built exclusively for merchant store operators. The App is not directed toward children under the age of 16 (or 13 where permitted by local law), and we do not knowingly collect information from minors. If you believe a minor has provided information to us, please contact us immediately for deletion.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect enhancements to our features, updates in AI integrations, or evolving legal frameworks. When changes are made, we will update the "Last Updated" date at the top of this page.

Continued use of Lux following any modifications signifies your acceptance of the revised terms.

13. Contact Us

If you have any questions, feedback, or privacy-related requests regarding this policy or our data practices, please reach out to our team:

Webiots Development Team
App: Lux — AI Visual Studio
Email: support@webiots.com
Website: https://webiots.com