Lucro
App review helpPrivacy PolicyTerms of ServiceMeta data deletion

Lucro

Privacy Policy

This Privacy Policy describes how Lucro (“we”, “us”) collects, uses, and shares information when you use our websites, applications, and integrations at lucrohq.com and related services. Lucro connects advertising, commerce, and messaging systems (including Meta, Shopify, and Slack) to help businesses operate budgets and workflows.

Last updated: April 15, 2026

Who we are

Lucro provides software and integrations for brands. You can reach us at privacy@lucrohq.com for privacy requests and support@lucrohq.com for general support. Public information for reviewers: App review help.

Scope

This policy applies to Lucro, including the website, application, integrations, and related services we provide to help businesses manage advertising budgets, commerce data, notifications, and performance workflows.

Information we collect

We may collect the following categories of information:

  • Account information, such as your name, email address, and login details.
  • Business and workspace information, such as brand names, store identifiers, ad account identifiers, and connected platform metadata.
  • Service usage data, such as feature interactions, settings, timestamps, IP address, browser information, and device data.
  • Integration data from services you connect, such as advertising, commerce, analytics, or messaging platforms.
  • Communications you send to us, including support requests and other correspondence.

Shopify / commerce data

When you connect a Shopify store, we access Shopify data only with the permissions you grant. Our public Shopify connector requests read-only access to products, orders (typically the window Shopify allows for the scopes we use, with optional broader history if we add and you approve additional access later), and customers, in order to sync commerce data into Lucro for reporting, recommendations, and workflows tied to your brand.

We subscribe to Shopify's mandatory compliance webhooks for customer data requests, customer redaction, and shop redaction, and process those requests as described in Shopify's documentation.

Meta (Facebook) data

When you connect Meta, we request the minimum permissions needed for ad account reads and budget operations (typically ads_read and ads_management). We use this data to display performance information and to carry out scheduling or budget changes you configure in Lucro.

How to request deletion of Meta-derived data: If you used Facebook to authenticate, remove the app from your Facebook account settings and submit a data deletion request through Meta. We treat those notifications as binding: Meta delivers a signed request to our servers, and we process it promptly.

What we do when Meta notifies us: We immediately terminate active use of your Meta identity inside Lucro. Affected Meta credentials are marked revoked, all related ad account bindings are paused, and outstanding sync work tied to those bindings is released so Lucro does not keep running budgets, scheduling, or API calls on your behalf. After processing, Lucro will not use those credentials or bindings to access Meta for you. You receive a confirmation code and a link to this status page so you can verify the request was received and completed.

Broader privacy requests (including questions about retention of historical records) may be sent to privacy@lucrohq.com.

Data deletion callback URL (for Meta App Dashboard → Settings → Advanced → Data Deletion Request URL): https://lucrohq.com/api/webhooks/meta/data-deletion

How we use information

We may use information we collect to:

  • Provide, maintain, secure, and improve the service.
  • Authenticate users and manage access to workspaces, brands, and integrations.
  • Sync data from connected platforms and generate budget recommendations, schedules, insights, and operational logs.
  • Communicate with you about service updates, support, security, and administrative matters.
  • Monitor performance, prevent abuse, and enforce our terms.
  • Comply with applicable law and respond to lawful requests.

Legal bases and consent

Where required by applicable law, we process personal information on the basis of contract performance, legitimate interests, legal obligations, or your consent. If we rely on consent, you may withdraw it where allowed by law, but that does not affect processing already completed.

How we share information

We may share information with:

  • Service providers that help us host, secure, and operate the service.
  • Third-party platforms you choose to connect, based on your actions and configuration.
  • Professional advisors, auditors, insurers, or acquirers in connection with legitimate business needs.
  • Government authorities or other parties when required to comply with law, regulation, legal process, or to protect rights, safety, and security.

We do not sell your personal information for money. If any privacy law treats certain data-sharing for analytics or advertising as a "sale" or "sharing," we will handle those disclosures and controls as required by applicable law.

Data retention

We keep information for as long as reasonably necessary to provide the service, maintain security and audit records, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods may vary depending on the type of data and the context in which it was collected.

Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Your rights

Depending on your location, you may have rights to request access, correction, deletion, portability, restriction, or objection relating to your personal information. You may also have the right to appeal a denial of certain requests. We will respond in accordance with applicable law.

International data transfers

Your information may be processed in countries other than the one in which you live. Where required, we will use appropriate safeguards for cross-border data transfers.

Children's privacy

Lucro is intended for business use and is not directed to children. We do not knowingly collect personal information from children in violation of applicable law.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will post the updated version here and revise the "Last updated" date above. Material changes may also be communicated through the service or by other reasonable means.

Contact

Privacy: privacy@lucrohq.com
Support: support@lucrohq.com