Privacy Policy

Last updated: November 20, 2025

1. Data Controller

Luregod OÜ (registry code: 17115477)
Address: Särje 28/1-10, 10922 Tallinn, Estonia
Email: support@luregod.com

2. Personal Data We Collect

2.1 Data You Provide

Account Information: name, email address, password
Contact & Billing Information: postal address, phone number, EU VAT number (if applicable)
Order Details: order history, product selections, payment information
Customer Service & Communications: messages, inquiries, feedback

2.2 Data We Automatically Collect

Device & Usage Data: IP address, browser type, operating system, pages visited, time on site, click activity
Location Data: general geographic location inferred from IP
Cookies & Tracking: cookies, web beacons, analytics tools (e.g., PostHog)

2.3 Instagram Integration & Influencer Data

If you are a Pro user and choose to connect your Instagram Business account to Luregod, we receive additional data from Meta's APIs in order to provide Instagram-related features:

Instagram Account Identifiers: Instagram Business account ID, username, account type, linked Facebook Page ID and similar identifiers provided by Meta.
Instagram Media & Stories: information about posts and stories such as media ID, media type (image, video, carousel), media URLs and thumbnails, captions, permalinks and timestamps, as returned by the Instagram Graph API.
Derived Analytics & Metadata: tags, classifications, performance metrics, and other insights that we generate based on your Instagram content for the purpose of providing our services.
Authentication & Connection Data: access tokens and related technical information needed to maintain the connection to your Instagram Business account; these are stored securely and are never visible in plain text.

3. Legal Basis for Processing (EU/EEA)

We process personal data on the following bases:

Performance of Contract: to fulfill your orders, manage your account, and provide Pro features (including the optional Instagram Integration) that you choose to enable.
Legitimate Interests: fraud prevention, website security, service improvements
Consent: marketing communications and non-essential cookies
Legal Obligations: tax, accounting, and regulatory compliance

4. How We Use Your Personal Data

Process and fulfill orders, including shipping and payment handling
Provide customer support and respond to inquiries
Send transactional emails (order confirmations, shipping updates)
Personalize your shopping experience and recommend relevant products
Provide and improve Instagram-related features for Pro users, including syncing and analysing your connected Instagram content to generate insights and tools for managing or promoting your content
Send marketing materials with your consent
Analyze usage patterns to improve our website and services
Comply with legal and regulatory requirements

5. Cookies and Similar Technologies

We use cookies and tracking technologies for:

Essential Cookies: necessary for site functionality
Analytics Cookies: understand user behavior and website performance
Marketing Cookies: deliver relevant advertisements
Preference Cookies: remember your preferences and settings

You may manage or withdraw consent for non-essential cookies via our cookie banner or browser settings.

6. Sharing Your Information

We may share personal data with:

Payment Processors: Stripe, PayPal
Shipping & Logistics: DHL and other carriers
Social Media & Platform Providers: Meta Platforms (including Instagram and Facebook) when you choose to connect your Instagram Business account and we interact with their APIs to provide the Instagram Integration. Meta acts as an independent controller of the data it processes under its own terms and privacy policies.
Service Providers: hosting, analytics, customer support, marketing platforms
Legal & Regulatory Bodies: when required by law or to protect our rights

All service providers are contractually bound to protect your data and use it only as instructed by us.

7. International Data Transfers

Your data may be processed or stored outside the European Economic Area (EEA). We ensure adequate safeguards, such as Standard Contractual Clauses, are in place for any such transfers.

When you use the Instagram Integration, data retrieved from or sent to Meta Platforms (including Instagram and Facebook) may be processed on servers located outside the EEA. These transfers are also subject to Meta's own safeguards and transfer mechanisms as described in its privacy policies.

8. Data Security

We implement appropriate technical and organizational measures (encryption, access controls, firewalls) to protect personal data against unauthorized access, alteration, disclosure, or destruction.

9. Data Retention

We retain personal data only as long as necessary to fulfill the purposes outlined in this policy, or as required by law. When no longer needed, we securely delete or anonymize the data.

For Instagram Integration data, we retain access tokens and related technical data only as long as needed to maintain the connection and provide the Instagram-related features you have enabled. You may disconnect your Instagram Business account at any time from within your Luregod account or by revoking our app's access in your Meta/Facebook or Instagram settings. After disconnection, we stop retrieving new Instagram data and will delete or anonymize existing Instagram data and derived analytics where they are no longer required for legal, accounting, security, or legitimate business purposes.

10. Your Rights Under GDPR

If you are an EU/EEA resident, you have the right to:

Access and receive a copy of your personal data
Rectify inaccurate or incomplete data
Erase your personal data ("right to be forgotten")
Restrict or object to processing
Data portability
Withdraw consent at any time (without affecting prior processing)
Lodge a complaint with a supervisory authority (e.g., Estonian Data Protection Inspectorate)

To exercise these rights, contact us at support@luregod.com. This includes requests specifically related to data obtained via the Instagram Integration (for example, to request deletion of Instagram-related data we hold about you).

11. Children's Privacy

Our services are not intended for individuals under 18. We do not knowingly collect data from children without parental consent.

12. Changes to This Privacy Policy

We may update this policy periodically. We will post the revised version on our website with a new "Last updated" date.

13. Contact Us

If you have questions or concerns about this policy, please contact: support@luregod.com