LimeSpot Solutions Inc. ("LimeSpot", "we", "us", or "our") is committed to protecting the privacy of shoppers ("Shoppers") while providing personalized shopping experiences. We process personal information from our store clients' ("Store Clients") Shoppers to provide product recommendations and market intelligence. However, our output is restricted to aggregated, non-identifying data. We will not sell, rent, lease, or share Shopper information except as permitted by this Privacy Policy. This Privacy Policy is subject to and incorporated into our Customer Terms of Service.

This Privacy Policy also covers the LimeSpot browser extension and its Growth Grader. What they collect, where it is sent and how long we keep it are described in LimeSpot Browser Extension and Growth Grader below.

This Privacy Policy is based on five key principles:

Transparency: Store Clients must notify Shoppers that LimeSpot processes their data as described in this Privacy Policy.
Consent: Store Clients must obtain informed Shopper consent for data processing by LimeSpot.
Accountability: Store Clients must provide means for Shoppers to inquire about personal data and withdraw consent through LimeSpot or our Data Protection Officer.
Security: LimeSpot maintains secure data storage and transfer methods.
Breaches: LimeSpot notifies Store Clients of any security breaches or unauthorized processing.

Our Relationship to Our Clients and Their Shoppers

LimeSpot provides services to contracted Store Clients. We collect information at Shoppers' direction through Store Clients' platforms. LimeSpot relies on Store Clients to obtain informed consent and provide privacy policy access.

Shoppers may use third-party platforms (such as Facebook or Google) to access store sites. None of a Shopper's personal information is copied by or transferred to LimeSpot from any third-party platform in this circumstance.

LimeSpot cannot be held responsible if Store Clients fail to obtain proper consent or comply with data protection laws.

How We Collect Shopper Information

From Store Platforms: LimeSpot collects information through installed plugins or APIs as Shoppers interact with store sites, including product interests, order history, and browsing behavior.

Through Third-Party Platforms and CRM: Shoppers may authenticate using third-party services or store CRM systems. Information collected varies based on privacy settings with those platforms.

The Types of Information We May Collect

LimeSpot collects two categories of information:

Personally-Identifying Information ("PII"): Information uniquely associated with an identifiable Shopper, including age, gender, location, email, phone number, and sometimes IP address.

Non-Personally Identifying Information ("NPII"): Information not identifying specific Shoppers, such as store details, product collections, non-identifying order information, age ranges, geographical associations, shopping behavior, and aggregated or anonymized data derived from PII.

How We Use and Disclose Information

LimeSpot will not sell, rent, lease, share, or disclose information unless consent is provided, information is anonymized, or disclosure is legally required.

By accepting this policy, Shoppers authorize LimeSpot to use their information as follows:

Performance of Services: Use PII and NPII to fulfill stated purposes, assess shopping patterns, and create Shopper profiles. We may combine Shopper data across stores (without sharing PII between stores) and use information to improve our products and services.

Third-Party Platform Services: Push non-identifying shopping preference information to platforms like Facebook or Google for customized advertising. LimeSpot does not receive PII from these platforms. We also use authentication services provided by third parties.

Third-Party Service Providers: Engage other companies for data storage and analysis tasks. These providers access only necessary information for their functions.

Business Transfer: In mergers, acquisitions, or asset sales, Shopper information transfers as a business asset but remains subject to this policy unless Shoppers consent otherwise.

How We Use Cookies and Other Technologies

LimeSpot and Store Clients use "cookies," pixel tags, and web beacons to track Shopper behavior, measure advertisement effectiveness, and generate recommendations. Personal information collected through these technologies is treated as PII under this policy.

We use cookies to remember personal information across visits, combine information across different stores (without sharing PII between stores), and improve services. For example, knowing a Shopper's country and language enables customized experiences, while knowing product interests helps deliver relevant advertising and recommendations.

How We Keep Your Information Secure

LimeSpot implements reasonable security measures both online and offline. Only employees with confidentiality obligations access Shopper PII.

Internet transmissions use SSL encryption. Shopper information is pseudonymized and rendered as NPII. We maintain redundant systems and conduct routine security assessments.

However, no method of transmission over the Internet, or method of electronic storage, is 100% secure.

LimeSpot notifies Store Clients of unauthorized access or disclosure. Store Clients must inform affected Shoppers as required by law.

Contact: [email protected]

Storage and Transfer of Your Information

Shopper information may be transferred to, stored, and processed in the United States, Europe, or Canada. LimeSpot uses Microsoft's Azure platform data centers. Canada provides adequate data protection recognition.

Storage Duration for PII:

LimeSpot removes Shopper PII upon:

Shopper request via the Shopper Rights Access Portal
Store Client request or Shopper consent withdrawal notice
Shopper objection to PII processing received in writing
Discovery of unlawful PII collection
Request from supervisory or legal authorities with proper authorization

Storage for NPII not identifying Shoppers is indefinite.

Shoppers' Rights

Transparency: Full disclosure of information processing and purposes through this policy.

Accountability and DPO: Shoppers may contact our Data Protection Officer ([email protected]) regarding information collected by LimeSpot through Store Clients. LimeSpot may forward concerns to relevant Store Clients. Shoppers may lodge complaints with applicable supervisory authorities. European Shoppers note that LimeSpot, as a non-controller, need not have a European representative, but applicable Store Clients may if required by law.

Access, Rectification, and Deletion: Shoppers may request PII erasure through Store Clients or directly via [email protected]. Rectification requests should also be directed to [email protected].

Breaches: LimeSpot notifies Store Clients of breaches involving PII, providing details on breach nature, the DPO contact, possible consequences, and mitigation measures taken.

LimeSpot Browser Extension and Growth Grader

This section applies to merchants and other people ("Users") who use the LimeSpot browser extension (the "Extension") and its Growth Grader, which reviews an online store and writes a report on where it could personalize, and to people who receive a Growth Grader report by email ("Recipients"). The Extension collects information only from the one store a User activates the Growth Grader for, and only after they activate it. It does not collect or transmit information from any other website, and it runs no analytics or tracking.

LimeSpot's use and transfer of information received through the Extension adheres to the Chrome Web Store User Data Policy, including its Limited Use requirements. We use that information only to provide and improve the Growth Grader and the Extension's own features, we do not sell it or use it for advertising, and no person at LimeSpot reads it except with the User's permission, to keep the service secure, or to comply with law.

Activating the Growth Grader

What we collect: To activate the Growth Grader, a User submits a form on limespot.com with their name, email address, store address, store platform and annual revenue range, ticks a box to agree to our Terms of Service and this Privacy Policy, and may choose to receive LimeSpot marketing email. We record that agreement with the version of its wording and when it was given. We also record how they reached the form (campaign tags, referring page and ad click identifier), their browser and Extension version, when their activation link was sent and used, and when their Growth Grader runs start and finish. The form is checked with Cloudflare Turnstile. Rate limits use keyed one-way hashes of the email address and network address; we do not store raw IP addresses.

How we use it: We email the User a single-use activation link through SendGrid, activate the Growth Grader for their store only, limit how many runs each store receives, and send a copy of the request to the LimeSpot team. If the User opts in to marketing email, we record that consent and may add their name and email address to our customer messaging service, Intercom.

Reviewing the Store

When a User runs the Growth Grader, the Extension opens pages of the activated store, such as its home, collection, product, cart and search pages, through LimeSpot's page proxies (limespot.app and lsproxy.app) so they can be shown inside the Growth Grader. A storefront password typed into a proxied page passes through the proxy to the store. The Extension captures screenshots of those pages at desktop and mobile widths, together with their text, structure and selected page markup, and sends them with the store's address to LimeSpot's AI service (app-ai.personalizer.io). That service uses our AI provider, Anthropic, to analyze them and write the report.

Anthropic processes this content as our service provider under its commercial terms, which do not allow it to use the content to train its models. Anthropic keeps what it receives through its API for up to 30 days. A Growth Grader session lasts up to 30 days. The screenshots and page captures uploaded for a run are deleted shortly after its session ends, within about 11 minutes of the session expiring or being replaced by a new activation, and within 30 days of upload in any case.

LimeSpot's AI service also keeps a record for each store, holding how many chat questions its run has left and the details it needs to manage the store's sessions. It deletes that record 30 days after the store's latest session ends, so at most about 60 days after the Growth Grader was last activated for that store.

Grader Chat

A User may ask questions about the finished report. Each question is sent, with the conversation so far and the report, to LimeSpot's AI service and Anthropic to answer it, and each store's run includes a limited number of questions. LimeSpot's AI service does not store the questions a User types. It keeps each answer, with one-way fingerprints of the conversation and of the reply from which their text cannot be read, for 30 days after that answer, so that a repeated request receives the same answer, and then deletes them. To enforce daily limits it uses a keyed hash of the User's network address that changes every day; the address itself is not stored.

Emailing the Report

A User may email the finished report to themselves and to other people, up to five copies of each report in total, with an optional personal note of up to 500 characters for the Recipients. Before the report goes to anyone besides themselves, the User gives their full name and confirms that they have a personal or business relationship with each Recipient and that each would expect the email. The Extension sends the email addresses the User types, their name, that confirmation, the note and the report to limespot.com, which emails the report through SendGrid.

A Recipient's copy names the User, by full name and email address, as the person who shared it, and says it was sent by LimeSpot Solutions Inc. as a result of a referral by that User; replies go to the User. It carries no LimeSpot offer, only one link that explains what the Growth Grader is. Each Recipient receives at most one report email per store, and receiving it does not add them to any mailing list.

Every copy, the User's own included, carries a link to unsubscribe and a one-click unsubscribe that mail apps can offer. Unsubscribe links do not expire. The unsubscribe page offers two choices: stop Growth Grader reports that others share, or stop all LimeSpot email, which also adds the address to our email provider SendGrid's unsubscribe list for every email LimeSpot sends. Before a report is emailed to a Recipient, we check that they have not unsubscribed. A report or activation link a person asks for themselves is still delivered after they unsubscribe, because they requested it.

We keep a record of each send (the store, the addresses it went to, when it was sent and whether it was delivered) for 90 days. We do not keep the report or the note after sending, only a one-way digest of the request so that a repeated request is not sent twice. To keep the one-email-per-person promise, we keep a keyed one-way hash of each Recipient's address and store, from which the address cannot be read without our key, for three years. As the record of each referral, we keep the User's name, the version of the confirmation they gave, when they gave it and keyed hashes of the Recipients' addresses for three years, even if the User's activation details are deleted sooner. To honor unsubscribes, we keep a keyed one-way hash of each address that unsubscribed, rather than the address itself, until that address subscribes again. When someone subscribes or unsubscribes, we keep a record of that choice that holds their email address as they entered it, the choice they made, the wording they saw and keyed hashes of their network address and browser, for three years after their last change.

Where We Store Growth Grader Information

limespot.com and LimeSpot's AI service run on Cloudflare, and the Growth Grader information they keep is stored with Cloudflare in the United States (western North America). Email is sent through SendGrid, and AI analysis is performed by Anthropic, as described above.

What the Extension Stores in the Browser

The Extension keeps each store's report, the User's chat about it and the Growth Grader session in the browser's extension storage, so that returning to the store reopens them. They are deleted when the session ends, after at most 30 days, or earlier if LimeSpot ends the run. The single-use activation token is kept in the browser's session storage for at most 15 minutes, and stores the User activated are listed for up to 30 days. If the User's store subscribes to LimeSpot, the Extension also keeps a Studio sign-in for that store, which it validates and revokes with LimeSpot's servers at personalizer.io and removes when it expires or the User logs out. The Extension never receives the User's LimeSpot password.

How Long We Keep Growth Grader Information

Activation details, including the record of agreement to our Terms of Service and this Privacy Policy: 180 days after the request was last updated. Deleting them also deletes the store's run, activation, status and send records linked to them.
Activation links: stored only as one-way hashes and deleted 7 days after they expire. Activation records: deleted 30 days after they expire.
Attribution records and run-status events: 90 days.
Report send records, which hold the addresses a report went to: 90 days.
Report Recipient hashes (keyed): three years.
Referral records (the User's name, confirmation version and time, and keyed Recipient hashes): three years.
Unsubscribe list (keyed hashes): until the address subscribes again. SendGrid's unsubscribe list keeps an address that chose to stop all LimeSpot email until it is removed at that person's request.
Report email consent records, which hold the email address, the choice made and the wording shown: three years after the last change.
Grader chat answers, and the conversation and reply fingerprints, held by LimeSpot's AI service: 30 days after each answer.
Each store's record held by LimeSpot's AI service (chat allowance and session details): 30 days after the store's latest session ends, at most about 60 days after the last activation.
Growth Grader session, and the report, chat and session kept in the Extension: up to 30 days.
Screenshots and page captures uploaded for a run: deleted about 11 minutes after its session ends or is replaced, and within 30 days of upload in any case.
Content sent to Anthropic: up to 30 days.

Users' and Recipients' Choices

Emailing the report and the Grader chat are optional; the Growth Grader produces the report without them.
Anyone who receives a Growth Grader report email can unsubscribe at any time with the link in that email, from shared reports or from all LimeSpot email.
Anyone can object at any time, free of charge, to LimeSpot using their information for direct marketing, by unsubscribing or by writing to [email protected]. We then stop, and we keep only what we need to honor that objection.
A User can delete the stored reports, chats, sessions, activated stores and sign-ins at any time with Manage sessions, then Disconnect and forget, in the Extension's popup, or by removing the Extension.
To see or delete the Growth Grader information we hold about an email address, including send records, Recipient hashes, the unsubscribe list and consent records, contact [email protected]. After a deletion we keep only the keyed unsubscribe entry, so we do not email that address again, and referral records for the rest of their three years.

Changes to this Privacy Policy

LimeSpot may update this policy. Each version shows its date at the top. Before a material change takes effect, we give notice: to Store Clients by email, to Users with a current Growth Grader activation by email or in the Extension, and to everyone on this page. We do not use information we already hold for a new purpose that needs consent without first asking for it. Store Clients and Shoppers should review the policy periodically. The current policy applies to all PII about Shoppers using LimeSpot-enabled platforms unless otherwise stated.

Questions and Concerns

This policy is subject to British Columbia provincial law and applicable Canadian federal law.

For privacy concerns: [email protected]

For policy questions: [email protected]

Related Documents: Terms of Service | Acceptable Use Policy

LimeSpot Privacy Policy