Privacy and Cookie Policy

For our users (Creators and visitors of shoplit.io), Shoplit decides how your data is used. Under European law, we are the "controller".

For the customers of a Creator (people who buy, sign up or take a course on a Creator's page), the Creator decides how the data is used, and Shoplit processes it on the Creator's behalf as a "service provider" or "processor". The Creator's own privacy policy applies, and requests about that data should go to the Creator. We will help the Creator answer them.

Information you give us

• Account details: email address, display name, password (stored in hashed form), profile photo, username, language.
• Your content: products, pages, funnels, courses, images, videos, texts and the prompts you write for our AI tools.
• Business details: legal pages you fill in, payout status (your banking details stay with Stripe).
• Support messages: what you write to us or to Lya, our AI assistant.
• Ambassador program details, if you join: identity, contact, payout and tax information.

Information collected automatically

• Device and usage data: IP address, browser type, pages viewed, actions in the app, dates and times, error logs.
• Approximate location (country) derived from your IP address, used for security and to adapt the Service.
• Cookies and similar technologies, as explained in our Cookie Policy. Analytics cookies are used only if you accept them.

Information from third parties

• Google, if you sign in with Google: name, email address, profile photo.
• Polar, for subscriptions: payment status, plan, country, invoices (we never see your full card number).
• Stripe, for Creators who sell: account status and sales data.
• TikTok, only if you connect your account: see our TikTok Integration page.

Customer data processed for Creators: name, email address, purchases, course progress, reviews, and contacts a Creator imports or collects through their pages.

• To create and run your account and provide the Service, including AI generation, hosting, checkout and delivery of products.
• To process subscriptions and the platform fees on Creator sales.
• To send service emails (receipts, security alerts, important changes) and, if you agree, product news. You can unsubscribe from marketing emails at any time.
• To answer support requests, including through Lya.
• To keep the Service secure, prevent fraud and abuse, and enforce our Terms.
• To understand how the Service is used and improve it, using aggregated or pseudonymized data where possible.
• To meet legal obligations (tax, accounting, responses to lawful requests).

We do not use your content to train AI models, and we do not use automated decisions that have legal or similarly significant effects on you.

We share personal information only with the service providers below, who process it on our instructions, and when the law requires it.

We may also share information if required by law, to protect the rights and safety of Shoplit or others, or as part of a merger, acquisition or sale of assets (in which case this policy will continue to apply).

We do not sell personal information, and we do not share it for cross-context behavioral advertising. Tracking pixels that a Creator adds to their own pages are the Creator's responsibility and are loaded only after the visitor's consent.

We keep your account data while your account is open. When you delete your account, we delete or anonymize your personal information, except for records we must keep by law: billing and sales records are kept for up to 10 years for tax and accounting purposes. Backups and server logs are deleted automatically on a rolling basis, as newer copies replace them.

We use encryption in transit (HTTPS), encryption at rest for sensitive tokens, access controls, and the security measures of our providers. No system is perfectly secure, so we cannot guarantee absolute security. We will notify you of a data breach when the law requires it.

Shoplit is a U.S. company. Our main servers are in the European Union, and some providers process data in the United States. When personal data of people in the European Union, the United Kingdom or Switzerland is transferred outside those areas, we rely on the European Commission's Standard Contractual Clauses or on the EU-U.S. Data Privacy Framework where our provider is certified.

Wherever you live, you can:

• access and update your account details in Settings;
• download your ebooks and files from your dashboard;
• delete your account in Settings > Profile & Account;
• unsubscribe from marketing emails with the link in each email;
• refuse or withdraw consent to analytics cookies at any time on this page or in the cookie banner;
• ask us for a copy, correction or deletion of your data at legal@shoplithq.com.

We respond within 30 days (45 days where U.S. state law applies). We may ask you to confirm your identity before acting on a request.

Depending on the state you live in (including California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon and other states with consumer privacy laws), you may have the right to:

• know what personal information we collect, use and disclose, and get a copy of it;
• correct inaccurate personal information;
• delete your personal information;
• opt out of the sale of personal information, targeted advertising and profiling (we do none of these);
• not be discriminated against for exercising your rights.

To use these rights, email legal@shoplithq.com with the subject "U.S. Privacy Request". You may use an authorized agent, who must provide proof that you authorized them. If we deny your request, you can appeal by replying to our decision within 45 days. If your appeal is denied, you can contact your state Attorney General.

California. In the past 12 months, we collected the categories of information described in Section 2: identifiers, customer records, commercial information, internet and network activity, approximate geolocation, and the content you create. We collected them from the sources and for the purposes described above, and disclosed them only to the service providers listed in Section 4. We do not sell or share personal information, and we do not use sensitive personal information beyond what is needed to provide the Service. Under California's "Shine the Light" law, we do not disclose personal information to third parties for their own direct marketing.

Do Not Track. Our Service does not respond to browser Do Not Track signals. You can refuse analytics cookies through our cookie banner.

We process your data on these legal bases: to perform our contract with you (providing the Service); to comply with legal obligations (tax, accounting); our legitimate interests (security, fraud prevention, improving the Service), which we balance against your rights; and your consent (analytics cookies, marketing emails), which you can withdraw at any time.

You have the right to access, correct, erase, restrict and port your data, to object to processing based on legitimate interests, and to withdraw consent. Write to legal@shoplithq.com. You can also complain to the data protection authority of your country (in France, the CNIL).

The Service is not intended for anyone under 18. We do not knowingly collect personal information from children under 13 (or under 16 in the European Union). If you believe a child has given us personal information, contact us and we will delete it.

We may update this policy. We will post the new version on this page with a new date and, for important changes, notify you by email or in the app.

Shoplit, LLC, 131 Continental Dr, Suite 305, Newark, DE 19713, USA. Privacy questions: legal@shoplithq.com.