Privacy

Who is responsible for this data

The store you were shopping in decides what happens to your email address. They are the data controller. Lumine, which makes this app, only stores and sends on the store's behalf, as their processor.

So a request about your data can go either to the store you signed up on, or to us at partner@lumine.so and we will act on the store's instruction.

What the app stores

When a shopper asks to be told that a sold-out item is back, the app stores three things: the email address they typed, which product option they were waiting for, and whether that alert is still waiting, has been sent, or has been unsubscribed. It also keeps the time of the request and the address of the page it came from, so the store can answer a support question about it.

When an alert is sent, the app also records whether the button in that email was opened, and how many times, so the store can see whether its alerts are useful. The link carries a random code and nothing else: no email address and no name travel in it. The count is not joined to anything outside this app.

Nothing else about the shopper is stored. No name, no postal address, no payment details, no order history, no browsing history anywhere else, and no cookies are set by this app.

What it reads from the store

Product, inventory and location information, so it knows when something is back in stock and what to put in the email. The app has read-only access and never writes anything to the store.

Who else sees it

Resend (resend.com) delivers the alert emails, so an address passes through their sending service.

The app itself runs on Railway (railway.app), and its database is hosted there, in the European Union.

Those two, and the store owner, are the only ones who see the address. It is never sold, never shared for advertising, and never used to send anything other than the alert that was asked for.

When someone at the store views the list, exports it, imports a file or sends themselves a test, that is recorded: which store, which action, and how many records. No email address goes into that record.

How long it is kept, and how to have it deleted

A request that is still waiting after 12 months is deleted, and so is one that was answered more than 12 months ago. Nothing has to be asked for, it happens on its own.

Unsubscribing, from the link in any alert email, stops all email immediately. The address is kept after that for one reason only: to make sure nothing signs it up again, including a list the store imports from another app.

That record does not last forever either. After 12 months the address on it is replaced by a one-way code, which keeps the opt-out working while the address itself is gone.

To have the address removed completely, ask the store to delete you from their subscriber list, or write to partner@lumine.so. An erasure request sent through Shopify does the same thing automatically, and deletes every row matching that address.

When a store uninstalls the app, Shopify sends a deletion signal 48 hours later, and every row belonging to that store is deleted at that point, within 30 days of the uninstall in any case.