Builds By Luke

Legal · Wix apps

Privacy Policy for the Wix apps

Effective September 4, 2026

The short version

These apps run inside your Wix site and keep their data there, in the app’s own collections. Nothing is copied to a server of ours, no visitor is tracked, and there are no analytics, advertising or tracking services embedded in any of them. Wix handles billing, so we never see payment details. If you email us for support, we keep that correspondence for as long as it takes to help you, and nothing more.

Who is responsible

The apps listed below are developed and published by Builds By Luke, based in Canada. For the purposes of Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and the EU/UK General Data Protection Regulation (GDPR), Builds By Luke is accountable for the handling described in this policy.

The person accountable for this policy is the Privacy Contact at Builds By Luke. Questions, access requests and complaints all go to one place:

Which apps this covers

This policy covers the following apps, available through the Wix App Market:

  • Site Search & Product Search — Instant search for products, pages and posts that is never out of date — results come from the live catalog, not a stale copy.
  • Bundles & Volume Discounts — Buy-more-save-more pricing and bundle deals, applied automatically at checkout — no coupon codes, no checkout plugin.
  • Product Add-ons & Extras — Gift wrapping, engraving text and paid extras on the product page you already have, charged at checkout as named fees.
  • Comments & Moderation — Comment threads on any page, with a spam filter that explains itself and an approval queue you actually control.
  • FAQ Sections & Search — A separate FAQ for every page, with search that stays inside the section it is on and nothing ever added to a page for you.

It covers the apps only. The buildsbyluke.com website itself, including its contact form and chat, is covered by the site privacy policy.

Two roles, stated plainly

If you are a site owner who installs one of these apps, the data the app stores is stored inside your own Wix site and belongs to you. You decide what the app is configured to do, and you are responsible to your own visitors and shoppers for the data your site collects. The app processes that data on your behalf, in your site, to do the job you installed it for.

If you are a visitor or shopper on a site that uses one of these apps, the site owner is your point of contact for anything about that site. We do not receive your personal information from the app; see “What every app has in common” below.

What every app has in common

  • Each app stores what it needs in collections it creates inside the site owner’s Wix site. That data lives on Wix’s infrastructure, under the site owner’s Wix account, and is not copied to any server operated by Builds By Luke.
  • The apps call only Wix’s own APIs. No third-party service receives data from them.
  • The apps set no cookies of their own and do not fingerprint or track visitors.
  • As at the effective date above, no analytics, advertising or visitor-measurement tool is embedded in any of the apps. If that ever changes, this policy will be updated to describe it before it is switched on.
  • The only information about a site that reaches us automatically is what Wix sends any app developer: the app-instance identifier and which plan the site is on, so paid features can be unlocked. Wix does not send us your payment details.
  • Uninstalling an app removes the collections it created. One exception is noted under Bundles & Volume Discounts below.

What each app processes

The short answer first, because it differs by app and the difference matters. Only one of the five collects personal information about your visitors at all:

  • Site Search & Product Search — nothing about a visitor. It logs the search text with no identifier attached to it.
  • Bundles & Volume Discounts — nothing about a shopper. It stores the offers you create, and Wix’s own cart does the rest.
  • FAQ Sections & Search — nothing about a visitor. There is nothing for one to fill in, and the two helpfulness counters are plain totals with no identifier attached.
  • Product Add-ons & Extras — no contact details, but whatever a shopper types into a text extra is stored, such as an engraving message. That is the point of the feature, and it may contain personal details if they choose to put them there.
  • Comments & Moderation — this one does. A comment carries a display name, the comment itself, and a guest’s email address. Full detail below.

When a visitor searches, the app reads the site’s own public content (products, pages, blog posts, services and events) through Wix APIs and returns matching results. It writes a search log to a collection inside the site: the query, its normalised form, the number of results, the day, and whether the search came from the floating button or the inline bar. No name, email, account, IP address, cookie or other visitor identifier is stored with it. The site owner’s settings (which content is searchable, colours, text, synonyms, hidden pages) are stored in a settings collection in the same site.

The search log is kept for 7 days on the Free plan, 90 days on Pro and 365 days on Business, and the site owner can clear it from the app’s dashboard at any time. The app never reads orders, members or contacts.

Bundles & Volume Discounts

The app stores the offers a store owner creates (names, products or collections, quantities, percentages, schedule, status) in a collection inside the store, and reads product names, prices, images and collections from the store’s catalog to display them. Each offer is compiled into automatic discount rules that live in the store itself, under Marketing → Discounts, exactly like discounts created by hand.

No shopper data is collected by the app. Adding a bundle to the cart uses Wix’s own cart, under Wix’s privacy policy. Uninstalling removes the offers collection; the discount rules remain visible in the store until the owner deletes them, so nothing keeps applying silently.

Product Add-ons & Extras

The app stores the extras a store owner defines (names, prices, choices, products) in a collection inside the store. When a shopper adds a product with extras to the cart, the app stores which extras were chosen and any text the shopper typed (an engraving message, for example) in a second, privileged collection, keyed to the cart’s purchase-flow identifier and the cart line, so the fee can be calculated at checkout and shown on the order. Only the app’s own backend can read that collection.

A shopper may choose to type personal details into a text extra; that text is stored in the store owner’s site and shown to the store owner on the order, which is the purpose of the feature. No names, emails, addresses or payment details are collected by the app; those stay with Wix. Selections for abandoned carts remain in the collection until the site owner clears them or uninstalls the app.

Comments & Moderation

This is the only app of the five that stores personal information about a site’s visitors, so it is worth being exact. When a visitor posts a comment, the app stores in a collection inside the site owner’s site: the comment text, the display name given, the page the comment belongs to, the time it was posted, its status, and a spam score with the reasons behind it. If the visitor was a logged-in member of that site, their Wix member ID is stored instead of contact details, and no email is collected at all. If the visitor was a guest, the email address they typed is stored alongside the comment.

A guest’s email is stored for the site owner’s reference only. It is never shown to other visitors, never returned by the public thread, and never used to send anything — the app sends no email whatsoever. The site owner can see it in their dashboard and in a CSV export. The comment text and display name are public by design: that is what posting a comment means.

Spam scoring happens entirely inside the site. No comment, name or email is sent to any external classification service, ours included. The filter scores behaviour only — link stuffing, sales vocabulary, capitals, punctuation floods, repeated characters, an email hidden in the body, a suspicious author name and duplicate text across pages. It does not score language or writing system, so a comment in any language is judged the same way. The site owner’s settings (moderation mode, members-only, blocked words, heading, colour, sort order) are stored in a second collection in the same site.

Comments are kept until the site owner deletes them; deleting a comment in the dashboard removes the row and the email with it. A visitor who wants their comment removed should contact the owner of the site they commented on, who can delete it immediately. Uninstalling removes both collections.

This app collects no personal information about visitors at all. There is nothing for a visitor to fill in: no form, no comment, no account. It stores the site owner’s own content — the FAQ sections and the questions and answers written into them — in collections inside the owner’s site.

Two counters are kept against each question: how many times it was opened, and how many people marked the answer helpful or unhelpful. They are plain totals with nothing attached. No name, email, account, IP address, cookie or other identifier is recorded with them, so they cannot be traced to a person and are not personal data.

On the paid plans the app also adds a machine-readable copy of the questions on a page, as schema.org FAQPage structured data. It contains only the questions and answers the site owner wrote, and nothing about whoever is reading the page.

Plans and billing

Paid plans are sold and billed by Wix through the Wix App Market. Wix collects and handles your payment and billing details under its own terms and privacy policy; we receive only the plan level for each installation, never the payment details.

Support correspondence

If you email us, we receive your email address, your name if you include it, and the message you wrote, and we use them for one purpose: to reply and resolve your question. Support correspondence is kept for as long as it takes to resolve the matter and for a reasonable period afterwards in case it comes up again, and is never used for marketing. We only reply to people who contact us first.

Legal basis for processing (GDPR)

Where the GDPR applies to you, the legal bases are:

  • Performance of a contract (Art. 6(1)(b)): providing the app you installed, with the features of the plan you chose.
  • Legitimate interests (Art. 6(1)(f)): answering support requests, and keeping the apps secure and working. That interest is balanced against yours by collecting the minimum and keeping data inside your own site.

We do not rely on consent for any processing described here, so there is no consent for you to withdraw from us. Where a site owner’s own use of an app depends on their visitors’ consent, that is the site owner’s responsibility under their own policy.

Where the data lives, and international transfers

Data the apps store stays inside your Wix site, wherever Wix keeps it, and we do not move it. Support correspondence is handled in Canada, which the European Commission recognises as providing adequate protection for commercial organisations subject to PIPEDA, so no additional transfer safeguard is required for it.

Your rights

Under PIPEDA you may ask what personal information we hold about you, ask for it to be corrected, and challenge our compliance with this policy. Where the GDPR applies, you also have the rights of access, rectification, erasure, restriction, portability and objection.

  • Site owners control the app’s data directly: clear it from the app’s dashboard, or uninstall the app to remove its collections.
  • Visitors and shoppers should contact the owner of the site they used, who holds the data.
  • For anything we hold ourselves (support correspondence), email the Privacy Contact. Requests are answered within 30 days. Deletion is honoured except where a record must be kept for tax, accounting or legal reasons.

You also have the right to complain to the privacy regulator in your country if you believe your information has been mishandled, though we would ask for the chance to resolve it first.

Children

The apps are business tools for site owners and are not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has sent us information, email us and we will delete it.

Changes to this policy

If this policy changes in any material way, the revised version will be posted on this page with a new effective date at the top, and the change will take effect when it is posted. Material changes will never be applied retroactively to information already collected without telling you.

Contact

Privacy Contact, Builds By Luke, Canada