Privacy policy

This policy explains what our Shopify apps collect when you install them, how that information is used, and how it is deleted. The apps are operated by MB „Liūto media“, a company registered in Lithuania (“we”, “us”).

For data belonging to your store and your customers, you are the data controller and we act as your processor. Details are in our data processing agreement.

MailMedic

Data	Why
Your domain names and their public DNS records	To check SPF, DKIM, DMARC and related email settings
Scan results, scores and history	To show findings and detect when deliverability degrades
An email address you enter for alerts	Only to send monitoring alerts you asked for

MailMedic reads publicly available DNS records. It does not read your emails, your orders, your products or your customers — and it never changes anything in your store or DNS.

Repeatly

Data	Why
Customer email address and marketing consent status	To send the reminder, and to skip customers who did not consent
Purchased products, quantity, order date, line amount	To learn repurchase intervals and show recovered revenue
Reminder log, unsubscribes and snooze choices	To avoid duplicates and never contact someone who opted out
Web push subscription (browser endpoint and keys)	Only when a shopper explicitly allows notifications

Repeatly never stores customer names, postal addresses, phone numbers or payment details.

ThemeMedic

Data	Why
Theme file contents and names	To find leftover app code, broken renders and dead resources
Scan results and theme backups	To show findings and to make every cleanup reversible
An email address you enter for alerts	Only to send monitoring alerts you asked for

ThemeMedic does not process any personal data about your shoppers.

How the information is used

To provide the functionality of the app you installed — nothing else.
To send the alerts and summaries you explicitly enable.
To investigate errors and abuse, using server logs.

We never use merchant or customer data for our own marketing, never build profiles across stores, and never use it to train machine-learning models.

We do not sell, rent or share personal information — including as those terms are defined by the CCPA. Our sub-processors are listed on the GDPR & CCPA page.

Storage and security

Data is stored on our own servers in the European Union. Databases sit on an encrypted volume (LUKS2, AES-256), all traffic is encrypted with TLS, and daily backups are encrypted before storage. The full description is in our security policy.

Retention and deletion

Data is kept only while the app is installed.
Uninstalling deletes everything for that store, automatically.
We implement Shopify's mandatory data webhooks: a customer redaction request deletes that person's records; a shop redaction request deletes the whole store's data.
Encrypted backups expire after 7 days.

Your rights

Depending on where you live, you may have rights to access, correct, delete or port your personal data, and to object to or restrict processing. How to exercise them — and how California's CCPA/CPRA applies — is explained on the GDPR & CCPA page.

Cookies

Our marketing pages set no cookies and run no analytics. Inside the apps, only the session cookies required by Shopify for authentication are used.

Contact

Questions about this policy or your data: app@liutomedia.lt
MB „Liūto media“, Lithuania · company details