Privacy Policy

Last updated: May 15, 2026

This Privacy Policy describes how NeliApps ("we", "us", or "our") collects, uses, and shares information when you use Product Reviews ("the App") through the Shopify platform.

1. Information We Collect

From Merchants (Store Owners)

• Shopify store information (store name, domain, email)
• App configuration and review settings (auto-approval rules, email schedules, widget appearance)
• Email templates and design settings created within the App
• Review widget configurations and embed locations
• Google Merchant Center integration credentials and sync settings (when connected by the merchant)

From Customers (Store Visitors)

Product Reviews collects review submissions and email-engagement data from customers who interact with the App:

• Customer name and email address (provided when submitting a review or when the merchant requests a review)
• Review content: rating (1-5), title, body, and any uploaded photos or videos
• Verified-purchase status (linked to the corresponding Shopify order)
• Review-request engagement data (whether a review-request email was sent, opened, and whether the customer submitted a review)

2. How We Use Information

We use the collected information to:

• Publish reviews on merchant storefronts via review widgets
• Send review-request emails to customers on behalf of merchants
• Sync product ratings to Google Merchant Center when the merchant enables this integration
• Store and manage merchant-created widgets, email templates, and review-moderation settings
• Improve and maintain the App's functionality
• Communicate with merchants about their account and the App

3. Data Storage and Security

We store data securely using Amazon Web Services (AWS) infrastructure with industry-standard encryption and security practices. Data is stored in the United States.

• All data is encrypted in transit using TLS/SSL
• Database access is restricted and monitored
• Review photo and video uploads are stored in encrypted S3 buckets and served via CDN
• We regularly review and update our security practices

4. Third-Party Services

We use the following third-party services to operate the App:

• Shopify: E-commerce platform integration
• Amazon Web Services (AWS): Cloud hosting, database, object storage, and CDN delivery
• Google Merchant Center: Optional product-rating sync (only when a merchant connects their Google account)
• Email delivery providers: Used to send review-request emails on behalf of merchants

These services have their own privacy policies governing their use of data.

5. Data Sharing

We do not sell, rent, or trade personal information. We may share data only:

• With service providers necessary to operate the App (as listed above)
• With Google Merchant Center, when the merchant explicitly enables the integration, in the form of product ratings linked to product identifiers
• When required by law or to protect our legal rights

6. Data Retention

We retain merchant data (review settings, widgets, email templates, integration credentials) and customer review submissions for as long as the App is installed. When a merchant uninstalls the App, their data and the associated customer review data is deleted within 48 hours, unless retention is required by law.

Individual customers can request deletion of their personal data at any time by contacting the merchant; merchants can also delete or anonymize individual reviews directly from the App.

7. Your Rights

Merchants have the right to:

• Access: Request a copy of your data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data (or uninstall the App)
• Export: Export your review data and configurations

Customers whose reviews are stored in the App can exercise their rights (access, correction, deletion) by contacting the merchant whose store they reviewed. Shopify's GDPR data-request and data-redaction webhooks are also supported and handled within 30 days of receipt.

8. GDPR Compliance

For users in the European Economic Area (EEA), we process personal data in compliance with the General Data Protection Regulation (GDPR). The legal basis for processing is legitimate interest (providing the App's functionality to merchants) and consent (for customer-submitted reviews).

9. Children's Privacy

The App is not intended for use by children under 16 years of age. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify merchants of any material changes through the App or via email.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Email: support@neliapps.com
Company: NeliApps