Privacy Policy

This policy applies to Shopify merchants and their authorized staff who use the Review Store admin app ("Merchants"), end customers of those merchants who receive review requests or submit reviews ("Customers"), and visitors to our public pages such as our landing page, privacy policy, and terms of service.

Merchants are responsible for their own storefront privacy practices and for providing appropriate notice to their Customers when collecting reviews, especially when displaying Customer names, photos, videos, or other personal information publicly.

2.1 Merchant and staff information

When a Merchant installs Review Store through Shopify OAuth, we may collect:

• Shop domain and Shopify store identifier
• OAuth access tokens and session data required to operate the embedded app
• Staff user ID, name, email address, locale, and account role information provided by Shopify during authentication
• Billing and subscription status through Shopify's billing APIs when billing is enabled
• App configuration and settings, including branding, automation rules, email templates, discount codes, and media upload limits

2.2 Customer and order information

To send review requests, verify purchases, and associate reviews with products, we process information received from Shopify webhooks and APIs, including:

• Customer name, email address, and Shopify customer ID
• Order ID, order name, and fulfillment or payment status
• Product ID, title, handle, image URL, and product page URL

We access Shopify data only within the permissions granted by the Merchant at installation. Our current Shopify access scopes include read_products, read_orders, read_customers, and write_app_proxy.

2.3 Review content

When Customers submit reviews or Merchants create or import reviews, we may store:

• Star ratings, review titles, review text, and optional store-level ratings or comments
• Uploaded photos and videos, file metadata such as MIME type and file size, and public media URLs
• Review status, source, verification status, merchant replies, and publication timestamps
• Imported external review identifiers when reviews are migrated from third-party sources such as Loox CSV exports

2.4 Email engagement data

When we send review request or reward emails through our email provider, we may receive delivery and engagement events such as whether an email was sent, delivered, opened, clicked, bounced, or failed. For clicked links, we may store the destination URL associated with the click event.

2.5 Technical and operational data

• Server logs, request metadata, IP addresses, browser user agents, and error messages needed to secure and operate the service
• Webhook event identifiers used to prevent duplicate processing
• Background job identifiers for scheduled review request delivery and reminders
• Import job metadata, including file names, row counts, and error logs

We use the information we collect to:

• Provide, maintain, and improve the Review Store application and storefront widgets
• Authenticate Merchants and maintain secure Shopify app sessions
• Create, schedule, send, and track review request and reward emails
• Process review submissions, media uploads, moderation workflows, and merchant replies
• Display published reviews on Merchant storefronts through Shopify app proxy and theme extension endpoints
• Import historical reviews from supported CSV formats
• Calculate product review summaries and widget statistics
• Process subscription billing through Shopify when enabled
• Respond to privacy, support, and security requests
• Detect abuse, troubleshoot errors, and protect the integrity of the service

We do not sell personal information. We do not use third-party advertising or behavioral analytics trackers on Customer review pages.

Where applicable privacy laws require a legal basis, we process personal information to perform our contract with Merchants, to fulfill Merchant instructions in operating their review program, based on Merchants' legitimate interests in managing customer feedback, and as necessary to comply with legal obligations and protect our rights.

We share information only as needed to operate Review Store, including with:

• Shopify: for app installation, authentication, billing, webhooks, Admin API access, app proxy requests, and mandatory GDPR webhook compliance workflows
• Hosting and infrastructure providers: to run our application, database, and background processing services
• Merchant email providers: to send transactional emails through the SMTP account configured by the merchant
• Cloudflare R2: to store and serve uploaded review images and videos through public media URLs
• Shopify Flow: to let merchants schedule delayed review request delivery and reminder emails
• Merchants and their Customers: published reviews, reviewer names, ratings, review text, and approved media may be displayed publicly on Merchant storefronts through theme widgets

We may also disclose information if required by law, court order, or governmental request, or when we believe disclosure is necessary to protect rights, safety, and security.

Review Store uses cookies and similar technologies primarily for Merchant authentication inside the embedded Shopify admin experience. Shopify and our app session layer may set cookies or use comparable storage mechanisms needed to keep Merchants signed in and to secure API requests.

Public review submission pages and storefront widgets are designed to function without requiring Customers to create a Review Store account. We do not deploy third-party advertising cookies on those pages.

Email messages may contain tracking technologies used by our email provider to record delivery, open, and click events for operational analytics.

We retain information for as long as a Merchant keeps Review Store installed and as needed to provide the service. Specific retention practices include:

• Merchant session and shop configuration data is retained while the app remains installed
• Reviews, review requests, media, automations, and import records are retained until deleted by the Merchant, removed through Shopify compliance webhooks, or deleted when the shop is redacted after uninstall
• Email engagement timestamps and provider message identifiers are retained as part of review request records
• Operational logs and webhook deduplication records are retained for a limited period appropriate for security and troubleshooting

When Shopify sends a shop redaction request after uninstall, we delete shop-related application data from our systems, subject to limited backup retention where legally permitted.

We use administrative, technical, and organizational measures designed to protect information, including encrypted transport (HTTPS), access controls, webhook signature verification, and restricted production access. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Review Store may process and store information in countries other than where a Merchant or Customer is located, including where our hosting, database, email, media storage, or background job providers operate. Where required, we rely on appropriate safeguards for cross-border transfers.

10.1 Merchant choices

Merchants can access, update, moderate, publish, reject, or delete reviews and review requests within the app, configure whether reviews require verified purchase links, and uninstall the app at any time through Shopify.

10.2 Customer rights

Customers who wish to access, correct, or delete personal information associated with a review should contact the Merchant operating the store in the first instance. Merchants can manage or remove review content through the Review Store admin.

Where applicable law provides additional rights, such as access, correction, deletion, restriction, objection, or portability, you may contact us at privacy@reviewstore.app. We may need to verify your request and coordinate with the relevant Merchant when they control the underlying store relationship.

10.3 Shopify compliance webhooks

We support Shopify's mandatory privacy webhooks. When Shopify sends customer redaction requests, we remove or anonymize associated customer identifiers in review and review request records. When Shopify sends shop redaction requests, we delete shop-related application data.

Review Store is not directed to children under 13, and we do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us at privacy@reviewstore.app and we will take appropriate steps to delete it.

Merchant storefronts, Shopify admin, and review media URLs may link to or display content from third-party services outside our control. Their privacy practices are governed by their own policies. Merchants are responsible for ensuring their use of Review Store complies with their own legal obligations and Shopify's terms and policies.

We may update this Privacy Policy from time to time. When we make material changes, we will post the updated policy on this page and revise the "Last updated" date above. Continued use of Review Store after an update constitutes acceptance of the revised policy.

If you have questions about this Privacy Policy or our data practices, contact us at:

Email: privacy@reviewstore.app
Support: support@reviewstore.app