Legal

Privacy Policy

Effective date: March 1, 2026 · Last updated: March 1, 2026

1. Introduction

Lurielle (“we,” “us,” or “our”) operates the website lurielle.studio and the Lurielle application (the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our Service.

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this Privacy Policy, please do not access the Service.

2. Information We Collect

2.1 Information You Provide Directly

  • Account Information: When you connect your Shopify store, we receive your store name, store URL, and email address through the Shopify OAuth flow.
  • Waitlist Information: If you join our waitlist, we collect your email address.
  • Communications: When you contact us for support, we collect the information you provide in your message.

2.2 Shopify Store Data

When you install and use Lurielle, we access certain data from your Shopify store through the Shopify API. Specifically:

  • Theme Data: We read and write to your Shopify theme files, including Liquid templates, JSON settings files, and related assets. This access is necessary to publish pages and sections you create with our visual editor.
  • Theme Settings: We access your theme’s configuration settings (colors, fonts, layout options) to provide accurate design previews and ensure compatibility.

We request only the minimum Shopify API scopes required for the Service to function. Currently, we use the write_themes scope, which allows us to read and modify theme files on your behalf.

2.3 Automatically Collected Information

  • Log Data: Our servers automatically record information when you access the Service, including your IP address, browser type, operating system, referring URLs, pages visited, and timestamps.
  • Device Information: We collect information about the device you use to access the Service, including device type and screen resolution.

3. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Service, including publishing pages and sections to your Shopify theme
  • Authenticate your identity and authorize access to your Shopify store
  • Send you service-related notices, updates, and security alerts
  • Notify waitlist subscribers when the Service becomes available
  • Respond to your comments, questions, and support requests
  • Monitor and analyze trends, usage, and activities to improve the Service
  • Detect, investigate, and prevent fraudulent transactions and other illegal activities

4. Shopify Theme Data Handling

This section specifically addresses how we handle your Shopify theme data, as required for Shopify app compliance:

  • Purpose: We access your Shopify theme files solely for the purpose of publishing pages, sections, and templates that you create using the Lurielle visual editor.
  • Modifications: When you publish a page, we add new section files and template files to your theme. We update theme settings JSON files to register new sections. We never delete or overwrite existing theme files without your explicit action and confirmation.
  • Storage: Theme data is processed in real-time on our servers to generate previews and facilitate publishing. We do not retain copies of your theme files beyond what is necessary for the Service to function (e.g., caching for performance).
  • No Third-Party Sharing: Your Shopify theme data is never shared with, sold to, or accessed by third parties.
  • Revocation: You can revoke Lurielle’s access to your Shopify store at any time by uninstalling the app from your Shopify admin. Upon uninstallation, we cease all access to your store data.

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

  • Service Providers: We share data with third-party service providers who perform services on our behalf (e.g., hosting, analytics). These providers are contractually obligated to protect your data and use it only for the purposes we specify.
  • Shopify: We interact with your Shopify store through the Shopify API using the OAuth tokens you authorize. Shopify’s own privacy policy governs the data they collect.
  • Legal Requirements: We may disclose your information if required by law, regulation, legal process, or governmental request.
  • Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. We will notify you of any such change.

6. Data Retention

  • Active Accounts: We retain your account data for as long as your account is active or as needed to provide the Service.
  • Deleted Accounts: When you uninstall Lurielle from your Shopify store, we delete your account data within 30 days, except where retention is required by law.
  • Waitlist Data: We retain waitlist email addresses until the Service launches and you are notified, or until you request removal.
  • Log Data: Server logs are retained for up to 90 days for security and debugging purposes.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

  • Encryption of data in transit (TLS/HTTPS)
  • Encryption of sensitive data at rest
  • Secure storage of Shopify OAuth tokens with access controls
  • Regular security reviews and updates
  • Access to personal data restricted to authorized personnel only

While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

8. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request correction of inaccurate or incomplete data.
  • Deletion: Request deletion of your personal data, subject to legal retention requirements.
  • Portability: Request your data in a structured, machine-readable format.
  • Opt-Out: Unsubscribe from marketing communications at any time by clicking the unsubscribe link in any email or contacting us directly.
  • Revoke Access: Uninstall Lurielle from your Shopify admin to revoke all API access to your store.

To exercise any of these rights, contact us at privacy@lurielle.studio. We will respond to your request within 30 days.

For California Residents (CCPA)

If you are a California resident, you have the right to know what personal information we collect, request deletion of your data, and opt out of the sale of personal information. We do not sell personal information.

For European Residents (GDPR)

If you are located in the European Economic Area, your data is processed based on your consent (for waitlist sign-up) and contractual necessity (for providing the Service). You have the right to lodge a complaint with your local data protection authority.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have data protection laws different from those in your jurisdiction. We ensure appropriate safeguards are in place for such transfers.

10. Children’s Privacy

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal data, please contact us and we will take steps to delete such information.

11. Third-Party Links

The Service may contain links to third-party websites or services (including Shopify). We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party sites you visit.

12. Cookies and Tracking

We use essential cookies to maintain your session and authenticate your access. We do not use third-party advertising cookies. We may use privacy-respecting analytics to understand how the Service is used.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the “Last updated” date. Your continued use of the Service after any changes constitutes acceptance of the updated policy.

14. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: