Privacy Policy

Effective [REPLACE: effective date]. [REPLACE: Legal entity name] ("we", "us") operates the Reviews Shopify app.

1. Information we process

• Merchant data — store domain, contact, plan, and settings.
• Customer personal data — name, email, and order details, accessed under Shopify's Protected Customer Data rules solely to send review requests and verify buyers.
• Review content — ratings, text, photos, and videos submitted by reviewers.
• Usage & log data — technical logs needed to operate and secure the service.

2. How we use it

To send post-purchase review requests, display reviews on the merchant's storefront, verify buyers, prevent spam and fraud, provide support, and comply with law. We do not sell personal data.

3. Legal bases (GDPR)

Legitimate interest for transactional review requests, and consent where required. We honor unsubscribe requests and suppress customers who opt out.

4. Sub-processors

We share data only with providers needed to run the service: Shopify (platform), Postmark and Amazon SES (email delivery), Cloudflare R2 (media storage), Render (hosting), Neon (database), and AI providers for review summaries and spam detection. Each is bound by data-protection terms.

5. Retention

We minimize what we keep and delete customer personal data after the review window or on request. We honor Shopify's customers/redact and shop/redact deletion requests.

6. Security

Data is encrypted in transit and at rest, access is restricted and logged, and we maintain an incident-response process.

7. Your rights

Subject to law (GDPR/CCPA), you may request access, correction, or deletion. Contact your store, or us at [REPLACE: support@yourdomain.com].

8. International transfers & children

[REPLACE: transfer mechanism]. The service is not directed to children under 16.

9. Changes & contact

We will post updates here. Questions: [REPLACE: support@yourdomain.com] ([REPLACE: Legal entity name]).