Privacy Policy

Last updated: 17 August 2026

This Privacy Policy explains how LuxScout (“we”, “us”), a product of NodusTech Ltd., collects, uses, stores, and deletes information. We collect only what we need, and we do not sell your personal data.

LuxScout is a shop on this website and a mobile app. They process different information for different reasons, so they are described separately below. Sections 1–3 cover the shop, sections 4–7 cover the app, and sections 8–10 apply to both.

Questions or requests about your data? Contact us at support@nodustechltd.com.

1. Buying from the shop

What we collect when you order

To sell and deliver something to you we process your email address, delivery and billing address, contact telephone number where you give one, what you ordered, and your order history. If you order as a guest we hold the same information against the order rather than against an account — an order belongs to the person who placed it, not to a login.

Why we are allowed to (legal basis)

Performance of a contract: processing your order, taking payment, arranging delivery, and handling returns and refunds. We cannot sell to you without this.
Legal obligation: keeping invoices and tax records for the period the law requires.
Legitimate interests: preventing fraud, securing the service, and understanding — in aggregate — which products and pages work.
Consent: marketing email, if you ask for it. It is never a condition of buying, and you can withdraw it at any time.

Who your information is shared with

Stripe processes the payment. We never receive or store your card details.
The supplier who dispatches your parcel receives the delivery address and the contents of that shipment — the minimum needed to pack and send it. They do not receive your order history, your account, or anything about other orders.
The carrier receives what it needs to deliver and to let you track the parcel.

We do not share your information with anyone else, and we do not sell it.

How long we keep it

Orders, invoices and tax records: for the period required by law, even if you delete your account. This is a legal obligation and we cannot shorten it.
Addresses you save: until you delete them or delete your account.
Saved products: until you remove them or delete your account.

2. Cookies and local storage

This website uses no advertising cookies, no tracking pixels, and no third-party profiling. What it does use is the small amount of browser storage a shop needs to work:

Your delivery country — stored in your browser so prices, availability and delivery estimates stay correct as you move around the site.
Your bag — an opaque token identifying your bag, so it survives a refresh.
Your sign-in session — if you have an account and are signed in.
An analytics session key — a random value generated in your browser, kept only for the session, that lets us count a journey without identifying who took it. It carries no name, email or address.

All of these are strictly necessary to provide a service you have asked for, or are used only in aggregate, which is why this site does not interrupt you with a consent banner it does not need. Clearing your browser storage removes all of them.

3. Marketing

We send transactional email about your order — confirmation, dispatch, delivery, returns and refunds — because you have bought something and need to know what is happening to it. That is not marketing and cannot be opted out of while an order is in progress.

Marketing email is separate, requires your explicit consent, and is never a condition of buying. Every marketing message carries an unsubscribe link, and unsubscribing has no effect on your orders or your rights.

4. Information the mobile app processes & the providers we use

Account & data storage — Supabase

We use Supabase for authentication, database, and file storage. When you create an account we store your email and authentication credentials (managed securely by Supabase Auth) and app data such as your saved items, addresses, and order history. Data is stored on Supabase infrastructure.

Payments — Stripe

Order payments are processed by Stripe. We do not store your full card details; Stripe handles payment information directly. We retain the Stripe identifiers for an order so it can be reconciled, refunded and shown in your order history. LuxScout does not sell subscriptions and has no paid plan or recurring billing of any kind. See Stripe’s privacy policy for how they process payment data.

Product search

Search queries are processed by LuxScout and are not sent to any third party. We previously used an external search provider to retrieve availability and pricing from public sources; that service was ended in August 2026 and no search data is shared with anyone.

AI Try-On image processing — Replicate

If you use AI Try-On (a Premium/Beta feature), the photo you choose and the product image are sent to our AI provider (Replicate) to generate a preview. Vendor processing keys are held server-side and never exposed in the app. Generated previews and your uploaded photo are stored privately (see Retention) and the provider’s temporary prediction data is removed automatically per its data-retention policy.

Push notifications — Firebase Cloud Messaging & Expo

If you enable notifications, we register a device push token (via Expo, delivered through Firebase Cloud Messaging on Android) so we can send alerts you’ve set up. You can disable push, set quiet hours, and choose categories in the app; alerts also remain available in an in-app feed.

Photos you upload

Photos are used only for AI Try-On and only after you explicitly consent. They are stored in a private storage area accessible only to your account, are never made public or shared, and are deleted automatically (see below).

Analytics

We use privacy-conscious product analytics to understand feature usage and improve the app. We do not use this to sell data or build advertising profiles.

5. How the app uses information

To provide core features: browsing the range, placing an order, delivery and returns.
To manage your account and your orders.
To send notifications you have opted into.
To maintain security, prevent abuse, and meet legal obligations.

6. App data retention & deletion

AI Try-On images: your uploaded photo and the generated preview are automatically deleted within 72 hours (configurable), and removed from the AI provider per its short-retention policy.
Account data: retained while your account is active.
Notifications: device tokens are kept until you disable push or delete your account.

7. Deleting your account

You can delete your account at any time from Profile → Delete account in the app, which permanently removes your account and associated data (saved items, addresses, uploaded photos, and order records not required for legal or tax retention). You can also request deletion by email — see our Delete Account page. Some records may be retained where required for legal, tax/payment, or security purposes (see that page for detail).

8. Your rights

Depending on your location, you may have rights to access, correct, export, or delete your personal data. To exercise these, contact support@nodustechltd.com.

9. Children

LuxScout is intended for adults and is not directed at children under the age required by your jurisdiction.

10. Changes

We may update this policy; material changes will be reflected here with a new “last updated” date.