This Privacy Policy explains how Lovelux Boutique (銳松商行, "we", "us") collects, uses, protects and deletes data in the Juchang service (https://juchang.app, the "Service"). By using the Service you agree to this policy.
1. About the Service
Juchang is an operations platform for solo and small appointment-based studios. Store owners build sales pages and bookings, connect their LINE Official Account and Facebook Page / Instagram professional account, reply to customers in one inbox, use owner-configured automated messages and an AI assistant to help reply, and review marketing results.
2. Data We Collect
Store owner account data: email, name, password (stored as a secure hash), store name, address, services, prices, photos and plan payment records.
Facebook Login for Business: the IDs and names of the Pages and Instagram professional accounts you choose to authorize, and the Page access token (stored encrypted).
Messenger and Instagram messages: content, attachments and timestamps of messages customers send to your Page / Instagram account, the platform-scoped customer ID, the customer's name and profile picture, and the ad ID Meta provides when a customer starts a conversation from your click-to-message ad.
Page and Instagram comments: comments customers leave on your posts, Reels or ads, and the URL of the post.
LINE Official Account: the customer's LINE user ID, display name and messages sent to your account.
Threads: the ID, username and profile picture of the Threads account you connect, its access token (stored encrypted, about 60 days, renewed automatically before expiry), and the content and metrics of your own posts.
Posts you publish from Juchang: the text, image and publish time of posts you approve for your Page, Instagram account or Threads account, and the post IDs and URLs the platforms return.
Your customers' data: names, phone numbers, emails, booking and purchase records customers provide, and tags or notes added by the store.
Usage data: IP address, browser type, pages visited and timestamps, used for login security, debugging and improving the Service.
3. How We Use Data
We do not sell data, do not use Meta or LINE data for ad targeting or for building profiles unrelated to the Service, and never share one store's data with another store.
To provide the Service: show customer messages and comments in your inbox, let you reply, handle bookings and send transactional notifications.
Automated replies: reply to customers on Messenger, Instagram and LINE according to the automated message flows and AI assistant you configure. Public or outbound actions (public comment replies, posts, broadcast messages) are only sent after your approval or when you have written the content and turned the automation on yourself; the AI never posts publicly on its own.
Performance reports: visible only to your own store, e.g. how many customers each click-to-message ad brought and how many booked.
Account and security: identity verification, abuse prevention and handling your support requests.
4. Meta Platform Data and Permissions
We access Meta data only after you explicitly authorize it through Facebook Login for Business (or Threads login for Threads), and only for the purposes below. You can disconnect at any time in Juchang Settings → Integrations → Meta (Meta 串接), or remove Juchang's access in your Facebook or Threads settings.
pages_show_list: list the Pages you manage so you can choose which one to connect.
pages_manage_metadata: subscribe the connected Page to message and comment webhooks so Juchang can receive them.
pages_read_engagement, pages_read_user_content: read the Page name, post URLs and comments on posts to display them in the inbox.
pages_messaging: receive and reply to Messenger messages customers send to the Page; when a customer comments with a word you set, send them one private reply according to the automated message flow you turned on (at most one per comment).
pages_manage_engagement: reply publicly to comments as the Page after your approval, or with one of the reply templates you wrote when you turn that on for a comment-keyword flow.
pages_manage_posts: after you write and approve a post in Juchang, publish it to your connected Page (text, or one photo with text) right away or at the time you scheduled. Nothing is published without your approval, and we never edit or delete existing Page posts.
instagram_basic, instagram_manage_messages, instagram_manage_comments: read the Instagram professional account name, receive and reply to Instagram messages and comments, send one private reply to a customer who comments with a word you set, and optionally post one of your reply templates under that comment, according to the automated message flow you turned on.
instagram_content_publish: after you approve a post in Juchang, publish it to your connected Instagram professional account (one photo with a caption) right away or at the time you scheduled. Nothing is published without your approval.
read_insights, instagram_manage_insights: read views, likes, comments and shares of the posts you published to your Page and Instagram account from Juchang, shown only on the post cards in your Juchang dashboard and never shared.
threads_basic: read the username and profile picture of the Threads account you connect, to show which account is connected, and read your own published posts to match them with the posts you published from Juchang and show their results.
threads_content_publish: after you approve a post in Juchang, publish it to your own Threads account right away or at the time you scheduled; nothing is posted without your approval, and you can cancel a scheduled post before it goes out.
threads_manage_replies: when your post is a short thread (a main post plus up to four follow-ups), publish the main post first, then publish each follow-up as a reply to your own main post. We only reply to posts you published from Juchang and never reply to, hide or manage other people's posts or replies.
threads_manage_insights: read views, likes, replies and reposts of your own Threads posts, shown only in your Juchang dashboard.
Business Asset User Profile Access: show the name and profile picture of customers who message you in the inbox.
5. Service Providers
We share only the minimum data needed with the following providers, who process it on our behalf under contract:
Supabase: database and authentication.
Railway: hosting for the website and background jobs.
Cloudflare: image and file storage.
Anthropic: generating AI assistant replies (only the content needed to reply to that message).
Resend: sending email.
Meta and LINE: sending and receiving Messenger, Instagram and LINE messages.
Google Analytics: visit statistics for the Juchang marketing website (not used for stores' customer data).
6. Security
All traffic is encrypted with HTTPS; credentials such as Page access tokens are stored encrypted.
Each store's data is isolated at the database level; stores can only access their own data and staff access follows permissions.
We monitor for unusual access and notify affected users of security incidents as required by law.
7. Retention
We keep data while your account is active to provide the Service.
When you disconnect a Page / Instagram account in Juchang, we immediately unsubscribe the webhook and delete the stored access token, and stop receiving new messages. When you disconnect Threads, we immediately delete the stored Threads access token.
After you delete your account or request deletion, we delete the related data within 30 days, except records we must keep by law (such as transaction and accounting records) until the legal period ends.
8. Your Rights
Under Taiwan's Personal Data Protection Act (and, where applicable, GDPR and CCPA), you may request access to, a copy of, correction of, restriction of processing of, or deletion of your personal data. Email support@juchang.app; we will respond within 30 days after verifying your identity. See our Data Deletion page (/data-deletion) for how to delete Meta-related data.
If you are a customer who messaged a store through Messenger, Instagram or LINE, that store decides how your data is used and Juchang processes it on the store's behalf. You can contact the store, or email us directly.
9. Cookies
We use essential cookies to keep you signed in, and Google Analytics on the Juchang marketing website. You can refuse cookies in your browser, but sign-in may not work.
10. Children
The Service is for store owners aged 18 or over. We do not knowingly collect data from children under 13 and will delete it promptly if we learn we have.
11. Changes and Contact
We may update this policy and will change the "Last updated" date on this page; we will notify stores of material changes. Questions: support@juchang.app.