Effective date: June 26, 2026

This privacy policy describes what data the Look-it app ("the App") collects, how it uses it, and how it protects it. The App is intended exclusively for Shopify merchants who install it on their store; it does not collect personal data of end customers.

1. Data We Collect

At installation and during use, the App accesses:

• Shopify store data: store name, domain (*.myshopify.com), OAuth session token required to communicate with the Shopify Admin APIs.
• Product data: product ID (GID), title, images, prices, and availability status — used to build "looks" and the storefront widget.
• Look configuration: look title, trigger product, associated products, discount percentage, status (active/draft).

The App does not collect personal data of end customers (names, emails, addresses, payment data, order history). The storefront widget operates entirely client-side without sending data to external servers.

2. How We Use the Data

Data collected is used exclusively to provide the Look-it service:

• Generate and update the "Complete the look" widget on product pages.
• Synchronize Shopify metafields on trigger products and automatic discounts.
• Apply the set discount via the Shopify Discount Function when all look products are in the cart.

3. Where We Store the Data

Configuration data (looks, associated products, store settings) is stored in the application database (PostgreSQL hosted on Railway) hosted on the same infrastructure running the App. Metafields are written directly to the merchant's Shopify resources via the Admin APIs.

Upon uninstallation of the App, all records in the database are automatically deleted and metafields on trigger products are removed.

4. Third-Party Sharing

We do not sell, rent, or share merchant or store data with third parties, for any purpose (advertising, analytics, or otherwise).

5. Security

Access to Shopify APIs is via OAuth tokens with limited scopes (read_products, write_products, write_discounts). Communications between the App and Shopify transit over encrypted HTTPS connections. We do not store store access credentials outside of the session token managed by the Shopify framework.