How Lightning Commerce handles personal information and how to contact us about your privacy.
This policy explains how Lightning Commerce handles personal information in connection with its website and commerce services, and how you can raise privacy questions or requests.
Lightning Commerce is operated by Silk Commerce Corp. This policy covers personal information we handle to manage our own website, business relationships, accounts, billing, and support. It applies to visitors, prospective customers, merchant account users, and business contacts.
When a merchant connects a store or uses Lightning Commerce to synchronize orders, products, returns, or reviews, we process the merchant’s customer data on its behalf. The merchant decides why that data is processed, and its privacy policy governs that relationship. Our obligations for this processing are set out in our Data Processing Agreement (DPA). This policy does not replace the merchant’s notice or expand our rights to use customer data.
If your question concerns a purchase, shipment, return, or review for a particular store, contact that store first. Requests concerning data we process for a merchant are forwarded to the merchant in accordance with the DPA.
The information involved depends on the services you use and the information you or your organization provide:
Business and account details: your name, work email, organization, role, business address, account identifiers, authentication information, and account preferences.
Subscription and billing records: your selected services, billing contact, invoices, transaction references, and payment status. Payment information handled by an external payment provider is also subject to that provider’s notice.
Support and correspondence: messages, attachments, troubleshooting details, and feedback you send to us. Avoid sending passwords or unrelated sensitive information in a support request.
Technical records: IP address, browser and device information, request timestamps, pages or features accessed, errors, and security or authentication events associated with your use of our website and services.
Connected commerce data: information made available through integrations you authorize, such as store identifiers, product listings, inventory, orders, fulfillment details, returns, and review content. Where these records identify a merchant’s shoppers, we handle them under the DPA and the merchant’s instructions.
Information can come from you, your account administrator, your authorized integrations, and technical interactions with the services. Your organization controls the permissions it grants to connected platforms.
Account administration: establish accounts, authenticate users, manage subscriptions, and maintain customer relationships.
Service delivery: run the integrations and product functions selected by merchants and communicate service or account updates.
Customer assistance: answer questions, investigate sync failures, resolve billing issues, and address reported defects.
Reliability and protection: diagnose errors, prevent unauthorized access, investigate abuse, and maintain the security of the services.
Business communications: respond to demo requests and inquiries and send permitted product communications, subject to your choices and applicable consent requirements.
Legal administration: maintain required business records, comply with legal obligations, and establish, exercise, or defend legal claims.
For customer personal data processed on behalf of merchants, the merchant’s documented instructions and the DPA determine the permitted purposes.
We may provide information to vendors that support hosting, infrastructure, security, support, and billing, where needed for their work. For customer personal data, our DPA requires appropriate obligations for sub-processors and makes us responsible for their performance. You can request the current sub-processor list at legal@lightningcommerce.ai.
Account administrators may manage the users and settings of their organization’s account. When you authorize an integration, the information required for the selected workflow passes between Lightning Commerce and the connected platform. The platform’s own privacy terms govern its independent processing.
Information may also be disclosed to professional advisers, to authorities where legally required, or where necessary to address unlawful activity or protect legal rights. A merger, acquisition, or transfer of a business may involve relevant records, subject to applicable confidentiality and privacy requirements.
Web technologies can store or read information on your device to maintain sessions, remember preferences, or support technical functions. Browser settings allow you to remove stored data and restrict cookies; doing so can affect sign-in and other functions.
Where optional analytics or advertising technologies are used, the applicable notice and consent or opt-out controls must explain those uses. Your choices concerning optional processing do not prevent processing required to deliver a service you request.
You can unsubscribe from promotional emails using the message’s unsubscribe link, or contact us to update your communication preferences. Service, security, and billing notices may still be necessary while you maintain an account.
We assess retention by considering the purpose of a record, the duration of the customer relationship, applicable accounting or legal duties, and the need to resolve disputes. When information is no longer needed, it should be deleted or made non-identifying, subject to lawful retention requirements.
Return and deletion of customer personal data, including handling after service termination, are governed by the DPA and the applicable agreement. Contact us for information about retention relevant to your account or request.
Our DPA describes technical and organizational safeguards for customer personal data. Safeguards are intended to reduce the risk of unauthorized access, disclosure, alteration, or loss. No online system can guarantee absolute security. Protect your credentials and notify us of suspected account misuse.
Silk Commerce Corp. is based in the United States. Providing services through external infrastructure and integrations may involve processing across borders. Applicable data protection requirements and the relevant contracts govern these transfers.
For customer personal data covered by the DPA, consult its international transfer provisions, including the contractual safeguards applicable to the transfer. Contact us for information about the safeguards relevant to your information.
Depending on your location and the law that applies, you may be entitled to request access to, correction of, or deletion of personal information; receive a portable copy; restrict or object to certain processing; or withdraw consent. Some rights have exceptions, including where records must be retained by law.
Send requests concerning our own processing to legal@lightningcommerce.ai. Describe your relationship with Lightning Commerce and the request you wish to make. We may need proportionate information to verify your identity or the authority of someone acting for you. Do not send government identification unless specifically requested through an appropriate channel.
We will handle requests within the period required by applicable law and explain any applicable reason for refusing or limiting a request. Where a right to appeal applies, reply to the decision using the same contact address and state that you are appealing. You may also contact your relevant privacy regulator.
For a merchant’s shopper data, contact the merchant. We assist merchants with their obligations under the DPA.
Where applicable state privacy laws cover our processing, residents may have rights to know about and access their information, correct inaccuracies, request deletion, obtain a portable copy, and opt out of specified uses such as sale, sharing for cross-context behavioral advertising, or targeted advertising. Applicable law may also provide rights concerning sensitive information, certain profiling, and appeals.
California residents may exercise applicable CCPA rights without unlawful discrimination and may designate an authorized agent, subject to verification. Sections 2 through 4 explain the information categories, sources, purposes, and recipients described in this policy. Section 6 explains retention considerations.
Use the contact method in Section 8 for a privacy request, including an applicable opt-out request. Whether particular sale, sharing, or advertising rights apply depends on the actual processing and the relevant law.
Where EU or UK data protection law applies to our own processing, the legal basis depends on the activity: fulfilling a contract with you, meeting a legal obligation, pursuing a legitimate interest such as protecting the service or responding to a business inquiry, or your consent where required. Legitimate interests must be assessed against your rights and interests. Where consent is the basis, you may withdraw it without changing the lawfulness of earlier processing.
Residents of the European Economic Area, United Kingdom, and Switzerland may have additional rights under their applicable law and may complain to their competent data protection authority. Contact us to discuss the basis for a particular use or the safeguards for an international transfer.
If another jurisdiction’s privacy law applies to you, you may contact us to request access, correction, or other available remedies, or to raise a complaint. Applicable local law governs any additional rights and response requirements.
Lightning Commerce provides business services for merchants. The services are not intended for children. Our Acceptable Use Policy restricts the submission of children’s information and sensitive data. If you believe a child has provided information to us inappropriately, contact us so that we can investigate and take appropriate action.
Links to external websites and integrations lead to services operated by other organizations. Review their notices and permissions before providing information or enabling a connection. This policy describes Lightning Commerce’s processing, not the independent practices of those organizations.
We may revise this policy to reflect changes in services, processing practices, or applicable requirements. The revision date identifies the version presented here. Where applicable law requires notice or consent for a change, we will provide that notice or obtain that consent. A policy update does not itself supply consent for processing that requires it.
For privacy questions, requests, or complaints, contact:
Lightning Commerce
Operated by Silk Commerce Corp.
47 Discovery, Suite 100
Irvine, CA 92782, United States
Email: legal@lightningcommerce.ai
Phone: 949-748-3700