Reviewley ("we", "our", or "us") is a Shopify application that helps merchants collect and display product reviews. This Privacy Policy explains how we collect, use, and protect information when you use our application.
When you install Reviewley from the Shopify App Store, we receive access to your Shopify store data as permitted by the scopes you authorise. We collect:
We do not sell, rent, or share your personal data or your customers' data with third parties for marketing purposes.
We retain store and customer data for as long as your app subscription is active. Upon uninstallation, we anonymise or delete personal data within 30 days in accordance with Shopify's GDPR requirements. You may request earlier deletion by contacting us.
We process Shopify's mandatory GDPR webhooks: customers/data_request, customers/redact, and shop/redact. Customers of your store may contact you to exercise rights of access, correction, or deletion of their data.
The Reviewley admin panel uses session cookies required for authentication within the Shopify admin. The public-facing review widget and review submission form do not set cookies.
All data is transmitted over HTTPS. Access tokens are stored encrypted. We apply rate limiting and HMAC verification on all webhook and API endpoints.
We use Shopify's API to interact with your store. We do not integrate with third-party analytics or advertising services. AI-generated reply suggestions (if used) are processed via a language model API; no personally identifiable information is included in these requests.
We may update this policy periodically. Material changes will be communicated via the Shopify admin or email. Continued use of the app after changes constitutes acceptance.
For privacy-related enquiries, please contact us at support@reviewley.com.