Privacy Policy

Lunaria, by Luca Marullo. Last updated: October 2026. Versione italiana

This policy explains what data the Lunaria app ("the app") processes when it is installed on a Shopify store, why, and for how long.

Data we process

• Seasons and product links: the seasons the merchant creates (name, months, automatic on or off) and which products they apply to. These are stored in the merchant's own Shopify store as metaobjects and product metafields owned by the app.
• Product inventory settings: before taking a product off sale, the app saves how its variants were set (inventory tracking, quantity per location, selling when out of stock) so it can restore them when the season returns.
• Activity log: which products the app took off sale or put back on sale, when, why and whether it was the daily check or a staff member (by Shopify user ID).
• Product season status: for each seasonal product, whether it is out of season, the month it comes back and the names of its seasons, read by the storefront block.
• Store settings: tag name, daily check on or off, store name, time zone and language, subscription status, trial start date and the result of the last check.
• Session data: the access token Shopify gives the app (no staff names or emails).

The app does not collect any personal data of shoppers, and does not read orders or customer accounts.

Why

Only to provide the app's features: take products off sale and back on sale according to their seasons, show the out-of-season label and the return month on the storefront.

Retention

• The activity log is kept for 12 months.
• When the app is uninstalled, the access token is deleted at once; all other store data is deleted when Shopify sends the shop/redact request, about 48 hours later.
• Database backups are kept for 14 days.

Security

Data is stored in a PostgreSQL database on a virtual private server rented from Hostinger. Access tokens are encrypted at rest (AES-256-GCM).

Sharing

Processor: Hostinger (server and database). Data is never sold or shared for marketing.

Roles and requests

The merchant is the controller of their store's data; the app acts as processor on the merchant's behalf. Contact: info@innovadesignstudio.it