Luseri / Legal
Privacy policy
This page explains what data Luseri keeps, what it is for, how long it stays and how to have it erased. Luseri sells no data and shows no ads.
Updated
Who is responsible
The controller of your data is the publisher of Luseri, Arthur Renard (contact details in the legal notice). For any question: contact@luseri.com.
On public pages
The home page and the guides set no cookie and load no script from another site. Your light or dark theme choice stays in your browser and is sent nowhere.
Luseri counts the public pages viewed itself, to know what brings visitors: the page, the day and the source of the visit (the search engine, AI assistant or site you came from, or the campaign name added to the link). No IP address, no identifier and nothing stored in your browser: only daily totals are kept, for 400 days. The dashboard is not counted.
If you open the demo, an insight_demo cookie remembers it until you close your browser. As for any website, the host logs the IP address and the requested page on each visit, to run the service and protect it from abuse.
When you create an account
| Data | What it is for | How long |
|---|---|---|
| Your email address | Signing in, confirming your address, sending the weekly report and alerts | As long as your account exists |
| Your password | Signing in. It is never stored as such: only a fingerprint that cannot be reversed is kept | As long as your account exists |
Session cookie insight_session | Keeping you signed in | 30 days, or until you sign out |
Cookie luseri_lang, set by the dashboard and the account pages | Remembering the interface language, so the service answers you in it | 1 year |
| Account language | Choosing the language of the dashboard and of emails | As long as your account exists |
| Your answer to “How did you hear about Luseri?”, if you give one | Knowing how developers find the service | As long as your account exists |
| Number of questions asked to the AI assistant, and the IP address they come from | Limiting each account to 40 questions a day (200 for a founding member, to stop abuse), and each address to 80 | 24 hours |
| IP address and email entered, on each sign-in attempt | Blocking someone trying to guess a password | 24 hours |
| Links sent by email | Confirming your address or changing your password | 3 days for confirmation, 1 hour for the password |
When you connect your app
- Your Shopify Partner token, encrypted. Luseri only uses it to read: it changes nothing on Shopify.
- What Shopify returns about your app: installs, uninstalls and payments, with the name and web address of each store involved, and the message a merchant leaves when uninstalling.
- Your App Store listing, reviews and rank, which are public, and the keywords you choose to track.
- If you connect Google Analytics: visit numbers for your App Store listing, as daily totals, read with read-only access. They are views, the App Store page or site each visit comes from, the searches typed and your listing's position at the click, Install clicks, confirmed installs, the share of visits without interaction (bounce), and the visitors' country and language. They are erased after 760 days.
- If you add tracking to your app: the merchant actions your server sends. They are erased after 400 days.
- If you turn on automatic emails: your Resend key, encrypted, and the emails you write; the email address, name, owner's name and time zone of each store, when your app sends them; the language of the storefront of each store an email goes to, read on its public home page; your emails translated into those languages; for each email scheduled or sent, the store, the address, the time, its text and the language it was translated into, and, if you connect Resend's tracking, whether it was delivered, opened, clicked, refused or marked as spam; the addresses that unsubscribed, so they are never written to again.
- If you track your merchants' replies: your forwarding address; for each reply to your automatic emails, its author's address and name, the time and the email it answers, erased after 90 days; the time of the last copy received and, if your email provider sends one, the link or code that confirms the forward. The text of replies and their attachments are not kept.
Everything else is kept while the app is connected. When you remove an app, its data goes with it; when you delete your account, everything about it is erased at once. Database backups expire on their own within 7 days.
Public App Store readings (listings, reviews, rankings, search results) do not belong to one account: a single reading serves every account that follows the same listing or keyword. They therefore remain when you remove your app. Listing, category and search readings are erased after 400 days.
Data about the stores using your app concerns you first: Luseri processes it on your behalf, only to show you your numbers and, if you turn them on, to send the emails you wrote in your name and let you know of their replies. Under the European data protection regulation (GDPR), you are the controller and Luseri is your processor. Luseri uses it for nothing else and shows it to no other account.
When you connect your AI assistant (MCP server)
If you create a personal token in Settings, Luseri keeps its name, its creation date, the date it was last used and its fingerprint, never the token itself. It is erased when you revoke it or delete your account.
With this token, the AI tool you choose (Claude, Cursor, VS Code…) reads the numbers of your account's apps, read-only. What it asks for is sent to it, and so goes through the company that runs it, under its own terms: you decide to connect it. Luseri does not keep the content of these calls; it only records how many there are, to apply the daily limit, and the IP address of a call whose token is refused, to block anyone trying to guess one. These records are erased after 24 hours.
Emails
Luseri writes to you about your account (address confirmation, forgotten password) and, as long as you keep them on, sends a weekly report and alerts. You turn them off in one click with the link at the bottom of each, or in your account settings.
Automatic emails to your merchants go out from your own Resend account, in your name: Luseri hands them to Resend with your key, and Resend sends them under your terms with it. Each one carries an unsubscribe link; an address that unsubscribed receives nothing more from your app.
If you track their replies, they still land in your inbox; your email provider forwards a copy to a receiving address of Luseri, at Resend. Luseri reads these copies to recognize replies to your automatic emails and keeps only their author, time and the email they answer, never the text. Resend keeps the copies received in Luseri's account for the time set by its terms.
Companies that help run the service
| Company | Role | Where the data is |
|---|---|---|
| Vercel Inc. (United States) | Hosts the site and runs the servers | Frankfurt (Germany) for the servers |
| Neon Inc. (United States) | Database | Frankfurt (Germany) |
| Resend (United States) | Sending Luseri's emails, and receiving the reply copies your email provider forwards. Automatic emails to your merchants go through your own Resend account | Ireland |
| Anthropic PBC (United States) | AI assistant: receives your question, the three previous exchanges of the conversation and the summary of your app's numbers (metrics, plans, names of the top-paying and fading stores, uninstall reasons, public reviews, positions on tracked keywords, public summary of your listing and your competitors'). Suggested reply to a review, when you ask for one: the review's text and rating, the name of the store that left it and your app's name. Translating messages left by merchants. Translating your automatic emails into each store's language: their subject and text as you wrote them, with no merchant data | United States |
| Google (Ireland) | Reading your Google Analytics numbers, only if you connect it | European Union and United States |
| ImprovMX Inc. (United States) | Forwarding emails sent to contact@luseri.com | United States |
These companies use the data only to provide this service. Anthropic does not use it to train its models. When data leaves the European Union, the transfer relies on the European Commission's standard contractual clauses or on the EU–US Data Privacy Framework.
Security
All exchanges with the site are encrypted. Passwords are only kept as fingerprints and Shopify tokens are encrypted. After several failed attempts, sign-in is blocked for fifteen minutes.
Your rights
You can ask to see your data, correct it, receive it in a file or have it erased, and object to a use. Changing your email address and deleting your account are done directly in the settings. For the rest, write to contact@luseri.com: you get an answer within a month.
If the answer does not satisfy you, you can complain to the CNIL, the French data protection authority, at cnil.fr, or to the authority of your own country.
Changes
If this page changes on an important point, you are told by email before the change applies.
This English version is a translation for convenience: if it differs from the French version, the French version applies.