Privacy Policy

Last updated: April 30, 2026

This Privacy Policy describes how Lexora Technologies ("we", "us", or "our") collects, uses, and shares information when you use the Lexora Shoppable Video Shopify application (the "App"). By installing or using the App, you agree to the collection and use of information as described in this policy.

1. Information We Collect

From Merchants (Shopify Store Owners)

Store information: Your Shopify store domain, shop name, email address, and store locale.
Access tokens: OAuth access tokens issued by Shopify to allow the App to interact with your store on your behalf.
Billing information: Subscription plan status managed through Shopify's billing API. We do not store payment card details.
App usage data: Features used, video uploads, playlist configurations, and settings you apply within the App.

From Your Customers (End Users)

The App may display user-generated video content on your storefront. We collect:

Video content: Videos uploaded or submitted through the App's widget on your storefront.
Usage analytics: Aggregated, anonymised data about video views and interactions (e.g., play counts, watch duration). We do not collect personally identifiable information from your storefront visitors beyond what is necessary to display content.

2. How We Use Information

We use the information collected to:

Provide, operate, and maintain the App and its features.
Process and display UGC video content on your storefront.
Manage your subscription and billing via Shopify's billing API.
Communicate with you about updates, support, and account matters.
Generate anonymised analytics to help you understand content performance.
Improve the App and develop new features.
Comply with legal obligations.

3. Sharing of Information

We do not sell, rent, or trade your personal information or your customers' data. We may share information only in the following circumstances:

Service providers: Third-party vendors who assist us in operating the App (e.g., cloud hosting, AI video generation via fal.ai). These providers are contractually required to use data only to provide services to us.
Shopify: As a Shopify app, we operate within Shopify's platform. Shopify's own privacy practices apply to data processed through its APIs. See Shopify's Privacy Policy.
Legal requirements: If required by law, court order, or governmental authority.
Business transfers: In connection with a merger, acquisition, or sale of assets, with appropriate confidentiality obligations.

4. Data Retention

We retain merchant account data for as long as your App subscription is active. Upon uninstallation of the App from your Shopify store, we will delete or anonymise your store's data within 48 hours, unless we are required to retain it for legal or regulatory purposes.

Video content stored in association with your account is deleted upon uninstallation. You may also request deletion at any time by contacting us.

5. Data Security

We implement industry-standard security measures including encryption in transit (TLS/HTTPS), access controls, and regular security reviews. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

6. Shopify API Scopes

The App requests the following Shopify API access scopes and uses them solely for the purposes described:

read_products, write_products: To associate UGC videos with your product listings.
read_files, write_files: To upload and manage video files in your Shopify store's file system.

We do not access any data beyond what these scopes permit and what is necessary to provide the App's functionality.

7. Your Rights

Depending on your location, you may have the right to:

Access the personal data we hold about you.
Request correction of inaccurate data.
Request deletion of your data.
Object to or restrict processing of your data.
Data portability (where applicable).

To exercise any of these rights, contact us at the address below. We will respond within 30 days.

8. GDPR Compliance (EEA Merchants)

If you or your customers are located in the European Economic Area (EEA), we process data in accordance with the General Data Protection Regulation (GDPR). Our legal basis for processing merchant data is the performance of a contract (providing the App). For optional analytics, the legal basis is legitimate interests.

We respond to Shopify's mandatory GDPR webhooks:

customers/redact: We delete customer data upon request.
shop/redact: We delete all shop data within 48 hours of uninstallation when requested.
customers/data_request: We provide a copy of customer data upon request.

9. CCPA (California Residents)

If you are a California resident, you have the right to know what personal information we collect, the right to delete it, and the right to opt out of its sale. We do not sell personal information.

10. Children's Privacy

The App is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page with an updated date. Continued use of the App after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us:

Lexora Technologies
Email: [email protected]