Privacy policy

Information we collect

• Store identifiers, permission status, app settings, and theme integration status
• Product titles and descriptions, collection information, existing FAQs, and FAQ publication status
• FAQ search terms, unresolved keywords, and the history of AI suggestion generation, approval, and rejection
• Event logs required for support, incident investigation, and audits

Information used for AI suggestions

• AI suggestions use only product information, FAQ text, search terms, and supplemental information entered by the merchant.
• Customer names, addresses, email addresses, phone numbers, order details, and payment information are not sent for AI suggestions.
• AI processing is sent to OpenAI GPT-5.6 Luna through Cloudflare AI Gateway. Zero Data Retention is requested from the upstream AI provider. Cloudflare may process operational logs required for incident investigation and abuse prevention.
• Generated content is never published automatically. It is applied to an FAQ draft or published content only after the merchant reviews and approves it.

How we use information

• Provide product FAQs, shared FAQs, search experiences, and storefront display
• Aggregate unresolved keywords, identify FAQ improvements, and provide AI-assisted drafts
• Investigate issues, provide support, and respond to legal and Shopify data deletion requests

Service providers and third-party disclosure

• We do not sell or disclose collected information to third parties unless required by law or authorized by the data subject.
• We may use service providers as needed for hosting, databases, email, and AI suggestions.
• We use Cloudflare AI Gateway and OpenAI models as subprocessors for AI suggestions.
• We send service providers only the minimum information needed to produce FAQ suggestions.

Retention and deletion

• We retain FAQs, settings, and search-term records only as long as needed to provide and improve the app.
• After the app is uninstalled, we delete data that is no longer needed in response to Shopify data-deletion webhooks and manual requests.
• Requests for access, correction, restriction, or deletion can be sent to shopify@lumines.co.jp.

Security measures

• Access to the admin interface is controlled through Shopify authentication and required permissions.
• Data is transmitted over protected channels, and operational logs are reviewed only for incident investigation and abuse prevention.
• For support, we request only the information needed to investigate, such as the affected store, time of occurrence, and FAQ or product ID.