Prod Veristar · verified reviews, honest stars

Privacy policy

Last updated: October 21, 2026

Prod Veristar ("the app") is a Shopify app operated by Prod Veristar ("we"). It helps Shopify merchants collect and show product reviews. This policy explains what data the app processes, why, and for how long. For the shoppers of a store, the merchant is the data controller and we process data on the merchant's behalf (as a processor / service provider). Together with our terms of service, this policy forms the data processing terms between us and each merchant that installs the app: we process shoppers' personal data only on the merchant's instructions and for the purposes below, keep it confidential, protect it with the measures described here, use only the subprocessors listed, help merchants respond to shopper requests, delete it at the end of the service, and notify merchants of security incidents.

Data we process

Merchant (store) data: store name, domain, the store contact email, plan and billing status, products (titles, handles, images) and app settings.
Orders: order number, dates (ordered, fulfilled, delivered, cancelled, refunded), purchased products, the order ID, and the customer's name and email. Used only to time review request emails and to confirm that a reviewer bought the product ("verified buyer").
Reviews: rating, title, text, photos, the public display name the reviewer chose, and how the purchase was verified. Photos are stripped of hidden metadata (such as GPS location) before they are shown.
Emails: customer email addresses are stored encrypted, with a one-way hash for matching. We record sends, deliveries, bounces, complaints and unsubscribes.
Spam protection: a hashed IP address for rate limiting (kept for at most a day) and a Cloudflare Turnstile check when a review is submitted on the store.

Why we process it (purposes)

Sending review request emails and reminders on the merchant's behalf after an order is fulfilled.
Marking reviews as "verified buyer" by matching the reviewer to an order (order ID and email).
Collecting, moderating and displaying reviews and photos on the merchant's store.
Protecting the store from spam and abuse, keeping the service secure, billing, and support.

We do not sell personal data and do not use it for advertising.

How long we keep data

Access log entries (who viewed or exported personal data): 365 days, then deleted automatically.
Order data: 365 days after the order, then deleted automatically.
Reviews: until the merchant deletes them (deleted reviews are purged after 30 days; photos immediately).
Review import files: 30 days after the import finishes.
When a merchant uninstalls the app, Shopify asks us to delete the store's data 48 hours later; we delete it all.

Shoppers' rights

Shoppers can unsubscribe from review emails with the link in every email. Requests to access or delete personal data are made to the store; Shopify forwards them to us and we send the merchant a full export or delete the data (including the shopper's reviews and photos).

Why we process data (legal bases)

We process store data to provide the service the merchant signed up for (contract). Shopper names, emails and order details are processed on the merchant's instructions so the store can ask its own customers for a review and show which reviews come from verified buyers (the merchant's legitimate interest, or consent where the merchant's local law requires it). Every review request email has an unsubscribe link, and shoppers choose whether to write a review and which name to show.

Your rights (GDPR, UK GDPR, CCPA/CPRA)

Depending on where you live you may have the right to access, correct, delete, or export your personal data, to object to or restrict processing, to withdraw consent, and to complain to your data protection authority. California residents have the right to know, delete, and correct personal information and to not be discriminated against for using these rights. We do not sell or "share" personal information for cross-context behavioral advertising as defined by the CCPA.

How to request access or deletion

Shoppers: contact the store you bought from; Shopify sends us the request (customers/data_request or customers/redact) and we export the data to the merchant or delete it, including reviews and photos. You can also email us at prodveristar@gmail.com with the store name and the email you used; we will verify the request and coordinate with the merchant.
Merchants: delete reviews in the app at any time, or uninstall the app. Shopify sends a shop/redact request 48 hours after uninstall and we delete all of the store's data. To request earlier deletion or an export, email prodveristar@gmail.com from the store's contact address.

We respond to verified requests within 30 days.

AI features (optional)

When a merchant uses AI tools (sentiment, topics, spam checks, reply suggestions, or product summaries), we may send review text and the product title only to an AI provider. We never send customer names, emails, phone numbers, or order addresses. Results are cached so unchanged text is not re-sent. Without an API key, AI runs in a local practice mode that does not call an external service.

Service providers

Render (application hosting and background jobs, USA)
Supabase (PostgreSQL database, encrypted at rest)
Resend (email delivery)
Cloudflare (photo storage R2, spam protection Turnstile)
OpenAI (optional AI analysis; only when the merchant's plan includes AI and a key is configured)
Shopify (the platform the app runs on)

Some providers may process data outside your country (for example in the USA). We only use providers that protect data under written agreements.

Merchants' choices

Merchants can delete any review in the app, stop review emails at any time in Settings, and uninstall the app from the Shopify admin. After uninstalling, the store's data is deleted when Shopify asks us to (48 hours later).

Security

Encryption: data is encrypted in transit (HTTPS/TLS) and at rest in the database and photo storage; customer emails and Shopify access tokens are additionally encrypted by the app.
Access controls: each store's data is kept separate and is only visible to that store's staff through the Shopify admin. Operator access is limited to our staff via a separate, authenticated owner panel, and production credentials are restricted to the people who run the service.
Logging: we keep an access log recording when personal customer data (reviewer and customer names, emails, order matching) is viewed or exported, by merchants in the app and by our staff, for 365 days.
Incidents: we follow our security incident response policy, including notifying affected merchants and Shopify within 72 hours.

Children

The app is meant for merchants and adult shoppers and is not directed at children under 16.

Changes to this policy

If we change this policy, we update the date at the top of this page.

Contact

Questions or requests: prodveristar@gmail.com.