Security & Data Handling

When you connect your Shopify store (or other platforms), InsightLumina syncs your business metrics — things like daily revenue, order counts, conversion rates, product performance, and traffic sources.

We aggregate this data into summary statistics. We do not store individual customer records, personal information, or raw transaction logs. The data we keep looks like 'revenue was $42K last week, up 12% — not 'John Smith bought Product X for $89 on Tuesday.'

• Revenue and sales trends (daily/weekly/monthly)
• Conversion rates by channel and device
• Product performance metrics
• Traffic source breakdowns
• Customer cohort statistics (not individual profiles)

Every InsightLumina customer gets their own isolated data partition. Your data is never commingled with another customer's data. Our infrastructure enforces strict tenant isolation at the database level.

Data is stored in secure, encrypted cloud infrastructure. All data is encrypted at rest using AES-256 encryption and in transit using TLS 1.2+.

• Isolated per-customer data partition
• No data commingling between customers
• AES-256 encryption at rest
• TLS 1.2+ encryption in transit
• OAuth tokens encrypted separately at rest

The AI model only receives aggregated, anonymized statistics. When InsightLumina generates insights for you, it sends the AI summaries like:

The AI uses these statistics to identify patterns, find causes, and generate recommendations. It never sees the underlying raw data that produced these numbers.

We are explicit about what never gets sent to any AI model:

• Customer names, email addresses, or phone numbers
• Individual order details or transaction logs
• Payment information or credit card data
• Shipping addresses or personal identifiers
• Raw database records of any kind
• Your OAuth access tokens or API keys

This is a core architectural decision, not just a policy. Our system is built so that raw data physically cannot reach the AI — the aggregation layer sits between your data and the AI model.

You can request full data deletion at any time. When you delete your data:

• All aggregated metrics are permanently removed
• All OAuth tokens and connection credentials are destroyed
• All generated insights and reports are deleted
• Backups are purged within 48 hours
• No data is retained after deletion — period

Deletion is one-click from your dashboard. No hoops, no 'are you sure' emails, no 30-day waiting periods. Your data, your choice.

You control how long InsightLumina keeps your aggregated metrics:

• 30-day retention (Starter plan default)
• 60-day retention (Growth plan default)
• 90-day retention (Enterprise plan default)
• Custom retention period available for Enterprise

When data reaches the end of its retention period, it is automatically and permanently deleted. You can change your retention setting at any time.

Security details for the technically minded:

• All data encrypted at rest (AES-256)
• All data encrypted in transit (TLS 1.2+)
• OAuth tokens encrypted with separate key material
• Strict tenant isolation at the database level
• No shared infrastructure between customers
• Regular security reviews and dependency audits