ReviewZi – Privacy Policy

1 Introduction

ReviewZi ("we", "our", or "us") is a Shopify application that asks your customers to review the products they bought, using WhatsApp, and shows the published reviews on your online store.

This Privacy Policy explains what information we collect when you install and use ReviewZi, why we collect it, how we use it, and the choices you have regarding your information. By installing ReviewZi from the Shopify App Store, you agree to the practices described in this policy.

We follow Shopify's API terms, Partner Program Agreement, and applicable data protection legislation including the GDPR and CCPA.

2 Information We Collect

We collect only the minimum information necessary to request and display reviews.

Category	Data points	Source
Store information	Shop domain and the access token Shopify issues to the app	Shopify (on install)
Review settings	Request timing, reminder options, message text, publishing option, optional Google review link	Merchant-entered via ReviewZi settings
Review requests	Order ID and order number, Shopify customer ID, request status and dates, and a one-way encrypted code (hash) of the customer's chat address, used only to match their reply to the right order	Shopify order and fulfillment webhooks
Customer contact details	Customer first name and WhatsApp phone number	Read from the Shopify order when a review request is sent; not stored by ReviewZi
Connected WhatsApp account	The store's WhatsApp number and profile name, and the linked-device session that lets ReviewZi send messages from it	Created when the merchant scans the QR code on the Channels page
Subscription plan	The store's current plan and billing period, and the number of review requests sent this period	Shopify App Pricing (Shopify Partner API) and ReviewZi activity
Reviews	Star rating, review text, product reviewed, display name (first name and last initial), whether the customer agreed to marketing use	Submitted by the customer in reply to a review request

We do not store customer phone numbers, email addresses, shipping addresses, payment information or order contents. We do not collect browsing history or any data not listed above.

3 How We Use Your Information

To send your customers a review request (and at most one reminder) on WhatsApp after their order is fulfilled or delivered.
To show you the reviews you receive, and to display published reviews on your storefront.
To apply your plan's monthly limit and show your usage. Payments are handled by Shopify; we never see payment details.
To authenticate your Shopify session and maintain app security.
To diagnose technical issues and improve app performance.
To comply with Shopify's mandatory data privacy compliance webhooks.

We do not use your data for advertising, sell it to third parties, or use it for any purpose not listed here. Reviews are used in marketing posts only when the customer has agreed to it.

4 Data Sharing & Third Parties

We share your information only as necessary to operate the app:

Shopify – as a Shopify app, all data flows comply with Shopify's Privacy Policy.
WhatsApp – review requests are sent from the store's own WhatsApp number, so the customer's phone number and the message text pass through WhatsApp under WhatsApp's Privacy Policy.
Hosting infrastructure – our servers run on secure, industry-standard cloud infrastructure. Server providers act as data processors under signed data processing agreements.

We will disclose information if required by law, court order, or to protect the rights and safety of our users.

5 Data Retention & Storage

We retain your settings, review requests and reviews for as long as ReviewZi is installed on your store. When you uninstall the app, pending review requests are cancelled and your WhatsApp number is logged out straight away, and all store data is deleted when Shopify sends its shop redact request (48 hours after uninstall). When Shopify asks us to redact a customer, we delete that customer's reviews and review requests.

All data is encrypted in transit (TLS 1.2+). Access to production databases is restricted to authorised personnel only.

6 Your Rights as a Merchant

Depending on your jurisdiction (including EEA, UK, and California), you have the right to:

Access – request a copy of the data we hold about you.
Rectification – request correction of inaccurate data.
Erasure – request deletion of your data ("right to be forgotten").
Portability – request your data in a portable, machine-readable format.
Object – object to processing of your data in certain circumstances.

To exercise any of these rights, email us at comzi.official@gmail.com. We will respond within 30 days (or the legally required timeframe for your region).

Shopify also provides automated data request handling via the customers/data_request, customers/redact, and shop/redact compliance webhooks, which we implement.

7 Cookies & Tracking

The ReviewZi Admin panel (inside Shopify) uses session cookies set by Shopify for authentication purposes only. The storefront reviews widget script does not set any cookies, fingerprint visitors, or track customer behaviour on your store.

8 Children's Privacy

ReviewZi is designed for use by Shopify merchants (businesses) and is not directed at children under the age of 13. We do not knowingly collect personal information from children.

9 Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you via the ReviewZi app dashboard and update the "Effective date" at the top of this page. Continued use of the app after changes are posted constitutes your acceptance of the updated policy.

+ Additional Resources

These links can help you learn more about data privacy and the ReviewZi app: