For app store reviewers
Lucro — review guide
Lucro is a multi-connector platform for brands: it can connect Shopify (commerce data), Meta (ads), and Slack (notifications). The public Shopify app is a free connector that syncs store data into Lucro. Core ad automation features use Meta after the merchant connects their ad account inside Lucro.
Public URLs
- App / marketing home: https://lucrohq.com/
- Sign in: https://lucrohq.com/login
- Privacy: https://lucrohq.com/privacy-policy
- Terms: https://lucrohq.com/terms-of-service
Shopify
App URL (install entry): https://lucrohq.com/api/oauth/shopify/install
OAuth redirects to Shopify authorize, then to https://lucrohq.com/api/oauth/shopify/callback. If the merchant is not logged into Lucro yet, install continues via https://lucrohq.com/shopify/install-context (public).
Scopes used: read_products, read_orders, read_customers — to sync catalog, recent orders (Shopify's default window), and customer references for reporting and automation in Lucro. We may add read_all_orders after Shopify Partner approval for full historical order sync. We do not request write scopes on Shopify for this connector.
Compliance webhooks (mandatory): https://lucrohq.com/api/webhooks/shopify/customers-data-request, https://lucrohq.com/api/webhooks/shopify/customers-redact, https://lucrohq.com/api/webhooks/shopify/shop-redact.
Meta
Meta OAuth starts from an authenticated brand workspace: https://lucrohq.com/api/oauth/meta/connect?brandId=<uuid> (user must be a brand owner or admin). Callback: https://lucrohq.com/api/oauth/meta/callback.
Permissions: ads_read — read ad accounts, campaigns, spend, and insights. ads_management — apply budget and scheduling changes the user configures in Lucro.
Meta data deletion callback (App Dashboard → Advanced → Data Deletion Request URL):
https://lucrohq.com/api/webhooks/meta/data-deletion
Lucro processes Meta user data deletion callbacks immediately and terminates active Meta API use for the affected identity (see the Privacy Policy).
Suggested review flow
- Open /login and sign in with the test account / credentials provided in the Shopify submission form.
- Complete profile and create or select a brand if prompted.
- From the brand dashboard, use Connect Shopify and Connect Meta as needed to exercise OAuth.
- Confirm Privacy Policy and support contacts: support@lucrohq.com, privacy@lucrohq.com.
Public site: lucrohq.com (brand). This deployment may use a different host until DNS is fully cut over; URLs above use the current application base URL.