Deletion and the DPA
Export or delete your data from the Luria app, what Shopify's privacy webhooks remove, and how to get a signed Data Processing Addendum.
You can pull everything Luria holds for your store, or wipe it, from inside the app. Anything the app cannot cover is one email away.
What you'll need
- Shopify: the Luria app open in your admin, plus your
.myshopify.comdomain to type as confirmation. - Everything else: an email to privacy@luriart.com.
Export everything
In the Luria app, find the "Your data" card and click Export everything (JSON).
You get one file containing your connection record (domain, granted scopes, status, when it connected), your site record, your consent record, your usage counters, data sync status, install events, every visitor event Luria holds for your site, and every synced Shopify object. Access tokens are never included in an export.
Delete synced data
Same card, click Delete synced data…, then type your shop domain to confirm.
That permanently removes every synced Shopify object, every visitor event for your site, and the data sync jobs. Two things survive on purpose: your connection (the app is still installed) and your usage counters (an aggregate billing record with no personal data in it). There is no undo.
Everything else, by email
Email privacy@luriart.com. That is the route for a script install, for erasing a named visitor, and for any access, correction, export or objection request. Luria replies within 30 days.
If you are a visitor to a merchant's store rather than the merchant, contact that store first. A request sent to Luria directly is honored either way.
What Shopify's privacy webhooks do
Shopify sends Luria three kinds of request, and each is handled automatically.
- Customer data request. Luria records the request and alerts its operator with a 30-day due date. Luria holds no customer identity beyond what Shopify sent in the request itself. You are the controller, so you answer your customer.
- Customer redact. Every stored copy of that customer is deleted. Visitor events are keyed to Luria's own random session ids and carry no customer identity, so there is nothing else to erase.
- Shop redact. After an uninstall: visitor events, change history, the site record, the connection, data sync jobs, install events, your consent record, stored privacy-request records and every synced Shopify object are removed. The aggregate usage counter is kept as the billing record.
The DPA
You are the data controller for your visitors. Luria is your processor, and processes their data only to deliver variants, measure them and attribute conversions.
The plain-language summary lives at luriart.com/data-processing. A signature-ready DPA, including the subprocessor list below, is available on request: email privacy@luriart.com and Luria sends it for counter-signature.
Subprocessors
| Subprocessor | What it handles | Where |
|---|---|---|
| Vercel | Hosting, serverless functions, server logs | United States |
| Supabase | Postgres database: accounts, sites, events, scans | United States |
| Anthropic | Page content sent for analysis and copy generation, not used to train their models | United States |
| Hetzner | Scan workers that open your public pages | European Union |
| Cloudflare | Turnstile bot check on public forms | Global |
| Shopify | Store data you authorize by OAuth | United States |
| Resend | Transactional email | United States |
Luria is based in the United States, and relies on Standard Contractual Clauses for UK and EEA transfers. Customers are notified before a subprocessor that handles visitor data is added or replaced.
Verify it worked
- After a delete, export again. The events and Shopify object sections come back empty.
- The Status card still shows the app connected. That is expected: deleting data does not uninstall the app.
Common failures
- The delete button seems to do nothing. The confirmation has to be your exact
.myshopify.comdomain, character for character. - You uninstalled first. The app page is unreachable once the app is gone. Email privacy@luriart.com.
- You expected the free allowance to reset. Usage counters survive a data delete deliberately.
- The export has no access token in it. By design. Tokens are never exported.