Legal
Privacy policy
Last updated: October 13, 2026
Luòri operates a controlled product-sampling marketplace. This policy explains what we collect when you create an account, place an order, apply as a seller, join the waitlist, or browse the site.
Information we collect
- Account data: name, email, password hash, role (buyer, seller, admin).
- Waitlist data: email, optional name/company, buyer type, intended use, and signup source.
- Distributor data: business details, categories, verification documents you submit, and listing content under review.
- Transaction data: when sales are open — cart contents (samples and full-size lines when offered), shipping address, order history, and payment processor references (we do not store full card numbers).
- Technical data: basic server logs, security rate limits, and cookies required for session authentication.
How we use information
- Run your account and orders, and review seller applications
- Authenticate accounts and protect against abuse
- Fulfill sample and full-size orders (brands ship) and handle issues when sales are live
- Improve catalog quality, trust, and support operations
- Comply with legal obligations
Local storage and the installed app (PWA)
Luòri can be installed as a progressive web app. On your device we store cart contents, wishlist items, seller-onboarding step, and whether you dismissed an install prompt in browser localStorage so those choices persist between visits. That data stays on your device unless you check out, create an account, or submit a form. Clearing site data or uninstalling the app removes it. Installing the app does not give us extra access to your device beyond ordinary website storage.
Payments
When checkout is enabled, card payments are processed by Stripe. We do not store full primary account numbers (PAN) or CVV. We may keep Stripe payment and checkout references, order totals, and fulfillment records needed to run the order.
Brand analytics
Brand (seller) accounts can view aggregated sample-order metrics for their own listings — totals, top SKUs, and coarse country/region interest — and download a CSV for use outside Luòri. Those brand views do not include buyer emails, names, or shipping addresses. Showcase / demo catalogs are excluded from real analytics. We do not sell personal information.
Sharing
We do not sell personal information. We share data only with service providers needed to run the product (hosting, email, payments such as Stripe), with the brand you order from, or when required by law. A brand only receives what it needs to ship your order: your name, shipping address, and what you bought. Brands don't get your email, password, or card details. Luòri reviewers may access seller application materials.
Search engines and AI crawlers
Public catalog pages may be crawled by search engines and AI retrieval bots listed in our robots.txt. Account, checkout, cart, wishlist, login, and registration pages are marked noindex so they stay out of search results, and API paths are disallowed. Robots.txt is a request, not a guarantee that every crawler will honor it.
Retention
Account and waitlist data are kept while your account is open or until you ask us to delete it. Order and audit records may be retained longer for fraud prevention, disputes, and legal compliance.
Your rights
To get a copy of your data or delete your account, email us from the address on your account (see below). We confirm it's you, then send an export or delete your account within 30 days. Order records needed for tax, refunds or disputes are kept and de-identified where possible. You can sign out at any time. Some cookies are required for secure sessions and cannot be disabled while logged in. We will try to honor reasonable access and deletion requests. This section describes how to reach us; it is not a claim that we run a certified GDPR, CCPA, or similar compliance program.
Contact
Privacy questions: support@luori.co. Seller or partnership questions can also start at For sellers. Related: Terms of use.