Loook Audit — Privacy Policy

Loook Audit ("the App") is a Shopify app that scans a merchant's product catalog for cosmetic regulatory compliance (ingredients and marketing claims) against public regulatory sources for the US, EU, KR, and AU markets. This policy explains what data the App accesses, why, and how it is handled.

Data we access

• Store information — your .myshopify.com domain and an offline access token, used to read your catalog. Tokens are stored encrypted (AES-GCM) and are never shown to us in plain text.
• Product data — product titles, descriptions, and any ingredient metafields or text you enter, read via the read_products scope. We use this solely to run compliance checks and show you the results.
• Settings — the target markets you choose and an optional notification email address for regulatory-change alerts.
• Install source — when the App is first opened after installation, we may record a short marketing label from the page address (utm_source, utm_medium, utm_campaign — letters and digits only) and the host name (no path, no query) of the page that embedded the App. It is used only to understand which channels lead to installs, and is deleted with your store data.
• Billing — subscription status is managed by Shopify's Billing API. We do not receive or store your payment card details.

What we do NOT do

• We do not sell or share your data with third parties for advertising.
• We do not modify your products — the App is read-only on your catalog.
• We do not collect customer (shopper) personal data.

Subprocessors

The App runs on Cloudflare Workers (hosting and database). Regulatory-change alert emails, if you enable them, are sent via Resend. Compliance reference data comes from public regulatory sources (FDA, EU CosIng, Korea MFDS, Australia). These providers process data only as needed to operate the App.

Retention and deletion

Scan results and settings are kept while the App is installed. When you uninstall the App, we immediately delete the access tokens we hold for your store. When Shopify sends the shop/redact request (about 48 hours after the uninstall), we delete all other data associated with your store: scan results, settings, alert history, ingredient lists you entered, product category choices and feedback you submitted.

We keep only a one-way fingerprint of your store domain (a keyed hash; the domain itself is not stored) in two places: a trial record that prevents repeated free trials (billing-integrity purpose), and an install log that records only the event type (install, uninstall or plan change), its time, whether the store is a development store, and the plan. The fingerprint cannot be turned back into your store domain without a secret key that we hold, and these records contain no customer or personal data. You can also request deletion at any time by emailing us.

Your rights

You may request access to, correction of, or deletion of your store's data by contacting aidan.kr@gmail.com. We respond to Shopify's mandatory GDPR data-request and redaction webhooks (customers/data_request, customers/redact, shop/redact).

Changes

We may update this policy; material changes will be reflected here with a new "last updated" date.

Last updated: 2026-10-21 · Contact: aidan.kr@gmail.com