Terms and data processing

The service

Nudgeback is a Shopify app made by Lumine. It adds a Notify me when available form to sold-out product options, keeps the list of people who asked, and emails them when the item is back in stock.

The app is provided as it is, with no promise that a particular alert will arrive at a particular time. Email delivery depends on the shopper's mail provider, and stock changes depend on webhooks from Shopify. Either can be delayed by something neither the app nor the store controls.

You can stop using the app at any time by uninstalling it. Nothing has to be cancelled first, and the subscriber list can be exported to CSV on every plan, including the free one, before you go.

What you pay, and what happens to the price

The free plan is the absence of a Shopify subscription. It is fully functional and differs only in how many alerts can be sent per month. Charges for the paid plan are billed by Shopify, on your Shopify invoice.

The price you sign up at is the price you keep. If the list price goes up later, an existing subscription is not cancelled and recreated at the new amount.

Who is the controller and who is the processor

You, the merchant, are the data controller for your shoppers' personal data. You decide that the form is offered on your store and what is done with the list.

Lumine is your processor. We store and send on your instruction and for no other purpose. This page, together with the privacy note, is the data processing agreement between us. Installing the app is how you accept it.

We process personal data only to deliver the back-in-stock alert a shopper asked for, plus the admin screens and the CSV export that let you manage that list. It is never sold, never shared for advertising, and never used to send anything else.

What is processed

For each person waiting: the email address they typed, which product option they are waiting for, whether the alert is still waiting, has been sent or has been unsubscribed, the time of the request, and the address of the page it was made from.

When an alert is sent, we also record that it was sent and whether the button in it was clicked. The click link carries a random code and no personal data.

The app reads products, inventory and locations from your store. It has read-only access and never writes anything back to your store.

Sub-processors

We use these three, and no others:

Railway (railway.app), which hosts the app and its database

Resend (resend.com), which delivers the alert emails

Cloudflare (cloudflare.com), which provides DNS and TLS for the app's domain

If we ever add or replace one, this page changes with it. Turning on a different email provider without saying so here would make this document false.

Security

Data is encrypted in transit: the admin, the storefront form and the calls to Shopify and to the email provider are all HTTPS. The database is on encrypted storage at the host.

Access to production data is limited to one operator, and every account that reaches it (Shopify Partners, Railway, Resend, Cloudflare) has two-factor authentication turned on.

Admin actions that touch the subscriber list are logged: viewing the list, exporting it, importing a file, and sending a test email. The log records the store, the action, who did it and how many rows were involved. It records no email addresses.

If personal data held by the app is breached, we will notify you within 72 hours of becoming aware of it, with what we know at that point, and follow up as we learn more.

How long data is kept

A waiting request that is still unanswered after 12 months is deleted. So is a request that was answered more than 12 months ago. An item nobody has restocked in a year is not a waiting list any more, and the shopper has moved on.

An unsubscribe is permanent, so those rows are not simply deleted: after 12 months the address on them is replaced by a one-way hash. The opt-out keeps working, including against a list imported from another app, and the address itself is gone.

The access log is kept for 12 months as well.

Deletion

You can delete any subscriber from the Subscribers page at any time, and that deletes the row.

When a shopper asks Shopify to erase their data, Shopify sends the app a redaction request and every row matching that address is deleted.

When you uninstall, Shopify sends a shop redaction request 48 hours later and everything belonging to your store is deleted at that point, and within 30 days of the uninstall in any case. The 48 hour gap is Shopify's, and it exists so that uninstalling and reinstalling on the same day does not destroy your waiting list.

If you want your data deleted sooner than that, write to partner@lumine.so and we will do it.

Your responsibilities

You are responsible for having a lawful basis for sending these alerts to your shoppers, for your own privacy policy, and for what you upload. If you import a list from another app, you are confirming that those people asked to be told about those items.

Do not use the app to send anything other than the back-in-stock alert. It is not a newsletter tool and the addresses it holds were not given for marketing.

Liability, and changing these terms

To the extent the law allows, Lumine is not liable for lost sales, lost profit or indirect loss arising from a missed or late alert. If liability cannot be excluded, it is limited to the amount you paid for the app in the twelve months before the claim.

If these terms change in a way that matters, the date at the top changes and the app's listing points here. Continuing to use the app after that is how the change is accepted. Questions and complaints: partner@lumine.so.