Last updated: 2026
LookShop collects the minimum data required to run the app: your store domain (myshopify.com) and an encrypted access token used to manage media and hotspots. We do not collect personal data about your customers.
Store data is used exclusively to deliver app features: uploading media, linking products and rendering the storefront widget. We never sell or share data with third parties.
LookShop complies with GDPR and handles Shopify's mandatory webhooks: customers/data_request, customers/redact and shop/redact. When the app is uninstalled or a redaction request is received, all store data is deleted within 48 hours.
All traffic is served exclusively over HTTPS, access tokens are stored encrypted, and we use no third-party cookies — authentication relies on Shopify session tokens (JWT).
For privacy questions or data deletion requests, contact us at the email listed on the LookShop Shopify App Store listing.