Privacy policy

Information we collect

• Account data: name, email, password hash, role (buyer, seller, admin).
• Waitlist data: email, optional name/company, buyer type, intended use, and signup source.
• Distributor data: business details, categories, verification documents you submit, and listing content under review.
• Transaction data: when sales are open — cart contents, shipping address, order history, and payment processor references (we do not store full card numbers).
• Technical data: basic server logs, security rate limits, and cookies required for session authentication.

How we use information

• Operate waitlist invitations and distributor onboarding reviews
• Authenticate accounts and protect against abuse
• Fulfill sample orders and handle issues when sales are live
• Improve catalog quality, trust, and support operations
• Comply with legal obligations

Local storage and the installed app (PWA)

Luòri can be installed as a progressive web app. On your device we store cart contents, wishlist items, seller-onboarding step, and whether you dismissed an install prompt in browser localStorage so those choices persist between visits. That data stays on your device unless you check out, create an account, or submit a form. Clearing site data or uninstalling the app removes it. Installing the app does not give us extra access to your device beyond ordinary website storage.

Cookies

We use HTTP-only session and authentication cookies to keep you signed in and to protect account actions. These cookies are required for a logged-in session and cannot be turned off while you use an account. We may also set a locale preference cookie. When measurement is enabled we load Google Analytics 4 and, if we run ads, the Google Ads tag so we can count waitlist and seller-application conversions. Those tags may set first-party cookies and send page URLs, approximate location, and device type to Google. We do not sell your personal information.

Payments

When checkout is enabled, card payments are processed by Stripe. We do not store full primary account numbers (PAN) or CVV. We may keep Stripe payment and checkout references, order totals, and fulfillment records needed to run the order.

Sharing

We do not sell personal information. We share data only with service providers needed to run the product (hosting, email, payments such as Stripe when configured), with distributors for orders they must fulfill, or when required by law. Verification reviewers at Luòri may access distributor application materials.

Search engines and AI crawlers

Public catalog pages may be crawled by search engines and AI retrieval bots listed in our robots.txt. Account, checkout, cart, wishlist, login, registration, and API paths are disallowed there. Robots.txt is a request, not a guarantee that every crawler will honor it.

Retention

Waitlist and account data are kept while useful for launch and support, or until you request deletion where applicable. Order and audit records may be retained longer for fraud prevention, disputes, and legal compliance.

Your rights

You may request access to or deletion of waitlist or account data by contacting us at the address below. You can sign out at any time. Some cookies are required for secure sessions and cannot be disabled while logged in. We will try to honor reasonable access and deletion requests. This section describes how to reach us; it is not a claim that we run a certified GDPR, CCPA, or similar compliance program.

Contact

Privacy questions: privacy@luori.com. Seller or partnership questions can also start at For sellers. Related: Terms of use.