Privacy policy

1. Introduction

This Privacy Policy explains what data is handled by services operated by lunalink.ai (“we,” “us,” “our”). It covers two things: the Descriva Shopify app, and the free AI tools hosted at lunalink.ai.

2. lunalink.ai free tools

Our free tools — AI logo maker, product description rewriter, SEO meta generator, screen recorder, image resizer + AI reframe — run primarily in your browser. We don't require accounts and we don't store your recordings, prompts, or uploaded files on our servers.

• Screen recorder and in-browser image resize never leave your device. Nothing is uploaded anywhere.
• AI logo maker, description rewriter, SEO meta generator, and the AI reframe mode of the image resizer send your prompt or uploaded image to fal.ai for processing. fal.ai processes this data according to their privacy policy. We don't retain a copy ourselves beyond the brief server-side proxying needed to upload your image and return the result.
• No analytics cookies, no ad trackers, no third-party personal data collection.

3. Descriva — data we collect

3.1 Product data (via Shopify API)

To generate optimized content we read:

• Product titles, descriptions, tags, type, and vendor
• Product IDs (to associate generated content with the right product)

We do not read customer orders, customer profiles, emails, addresses, or any personal information about your shoppers.

3.2 Store information

• Shop domain (e.g. yourstore.myshopify.com)
• Session tokens (to keep you authenticated in the app)
• Billing plan and subscription status

3.3 Usage data

• Generation history — which products you optimized and the AI-generated output
• Usage counts (for plan limits and billing)

4. How Descriva uses your data

• Content generation — product data is sent to OpenAI's API to generate descriptions, titles, and tags on your behalf.
• History — so you can review and restore previously generated content.
• Billing — usage counts determine which plan tier applies.
• Support — to diagnose issues you report.

5. Third-party services

OpenAI

Product titles, descriptions, tags, type, and vendor are sent to OpenAI's API to generate content. No customer personal data is ever sent to OpenAI. OpenAI processes this data according to their Privacy Policy.

Hosting

Descriva is hosted on Render. Your data is stored in a PostgreSQL database on Render's infrastructure in the United States. lunalink.ai's free tools are hosted on Vercel in the United States.

No data sales

We do not sell, rent, or share your data with third parties for marketing, advertising, or any commercial purpose.

6. Data retention

• Product data and generation history — retained while the app is installed; deleted when you uninstall.
• Session tokens — expire automatically after inactivity.
• Billing records — retained for 12 months after your subscription ends for accounting purposes.

7. Security

All data is transmitted over HTTPS. Database access is restricted to the application. We follow Shopify's security best practices for app authentication and access token handling.

8. Your rights

You have the right to:

• Access — request a copy of data we hold about your store.
• Deletion — request deletion of your data at any time (or simply uninstall the app).
• Correction — request correction of inaccurate data.
• Portability — request your generation history in a portable format.

To exercise any of these rights, email us at hello@lunalink.ai. We respond within 30 days.

9. Shopify compliance webhooks

Descriva implements all three mandatory Shopify compliance webhooks:

• customers/data_request — we respond with any store-associated data within 30 days.
• customers/redact — we delete any customer-associated data upon request.
• shop/redact — we delete all shop data within 48 hours of receiving an uninstall redaction request.

10. GDPR & CCPA

If you are located in the European Economic Area, United Kingdom, or California, the rights listed in Section 8 apply to you under GDPR and CCPA respectively. To the extent we process personal data, we do so as a data processor acting on your instructions as the data controller.

Data may be stored and processed in the United States. By installing Descriva or using our tools you consent to this transfer.

11. Changes to this policy

We may update this policy to reflect changes in our practices or legal requirements. Material changes will be communicated via the app or by updating the “Last updated” date above.

12. Contact

Questions about this policy or data requests:

hello@lunalink.ai