Privacy Policy
Last updated: April 23, 2026
Lumin ("we", "our", "us") is a Shopify application that helps merchants optimize their stores for AI search engine discoverability. This privacy policy explains what data we collect, how we use it, and your rights regarding that data.
What data we collect
Lumin accesses the following store data through Shopify's API to provide its services:
- Store information (name, domain, contact email, currency)
- Product titles, descriptions, handles, prices, and tags
- Collection titles, descriptions, and handles
- Page titles and handles
- Blog post titles and handles
- Theme information (for schema markup injection)
We store your store domain, plan status, generated llms.txt content, schema markup settings, and crawler scan results in our database.
What data we do not collect
Lumin does not collect, store, or process any customer data, personal data, or personally identifiable information (PII) from your store's customers. We do not access orders, customer accounts, payment information, browsing behavior, or any checkout data.
How we use your data
We use the data we collect solely to provide Lumin's services:
- Generating llms.txt files that describe your store to AI search engines
- Configuring JSON-LD schema markup on your storefront
- Scanning AI crawler accessibility for your store
- Calculating your AI Readiness Score
- Processing billing through Shopify's Billing API
Data storage and security
Your data is stored on secure servers hosted by Fly.io with PostgreSQL databases. All data is transmitted over HTTPS. We do not sell, share, or transfer your data to any third parties.
Data retention
We retain your store data for as long as the app is installed. If you uninstall Lumin, we receive a notification from Shopify and delete your store data within 48 hours of receiving a shop redaction request.
Shopify compliance webhooks
Lumin responds to all mandatory Shopify compliance webhooks:
Customer data request: Since we do not store customer data, we acknowledge these requests and confirm no customer data is held.
Customer data erasure: Since we do not store customer data, no action is required beyond acknowledgment.
Shop data erasure: Upon receiving this request, we delete all store data associated with your shop from our database.
Your rights
You have the right to request access to, correction of, or deletion of any data we hold about your store. You can exercise these rights by contacting us at the email address below.
If you are located in the European Economic Area, you have additional rights under GDPR, including the right to data portability, the right to restrict processing, and the right to object to processing.
Third-party services
Lumin uses the following third-party services:
- Shopify API for accessing store data and processing billing
- Fly.io for application hosting
- PostgreSQL for data storage
Changes to this policy
We may update this privacy policy from time to time. We will notify merchants of any material changes through the app or via email.
Contact us
If you have any questions about this privacy policy or our data practices, please reach out.
support@tambourineai.com