Privacy Policy
Last updated: February 18, 2026
1. Introduction
RepuFlow ("we," "our," or "us") is committed to protecting the privacy of our users. This Privacy Policy describes how we collect, use, store, and share your information when you use our Shopify application and related services (the "Service").
2. Information We Collect
Account Information
When you install RepuFlow, we collect your Shopify store name, email address, and store URL through Shopify's OAuth authentication. We do not store your Shopify password.
Platform Connections
When you connect third-party platforms (Google Business Profile, Facebook, TikTok Shop, Yelp, Trustpilot), we store OAuth tokens to access your review data. These tokens provide read/write access to your reviews only — we cannot access other account data such as email, contacts, or files.
Review Data
We collect and cache reviews from your connected platforms, including reviewer names, ratings, review text, dates, and your responses. This data is used to power our AI response engine and analytics features.
Usage Data
We collect anonymized usage data such as feature usage, response times, and widget interactions to improve our Service. We do not track individual users across websites.
3. How We Use Your Information
- To provide and maintain the Service, including AI-generated review responses
- To sync reviews across your connected platforms
- To generate analytics and sentiment reports
- To display review widgets on your Shopify storefront
- To send you important service updates and notifications
- To improve our AI models and Service quality
4. Data Storage and Security
Your data is stored on secure servers with encryption at rest and in transit. OAuth tokens are encrypted using AES-256 encryption. We implement industry-standard security measures including regular security audits, access controls, and monitoring.
5. Data Sharing
We do not sell your personal data. We may share data with:
- AI providers: Review text is processed through our AI models to generate responses. No personally identifiable information is sent.
- Service providers: We use third-party services for hosting, analytics, and email delivery that may process data on our behalf.
- Legal requirements: We may disclose data if required by law, court order, or government regulation.
6. Data Retention
We retain your data for as long as your account is active. When you uninstall RepuFlow, we delete your data within 30 days, except where retention is required by law. Cached reviews and analytics data are purged immediately upon uninstallation.
7. Your Rights
You have the right to access, correct, or delete your personal data at any time. You can disconnect any platform connection from the RepuFlow settings page. To request data deletion or export, contact us at privacy@repuflow.app.
8. Cookies
Our marketing website uses essential cookies for functionality. The Shopify embedded app uses session cookies required for authentication. We do not use third-party tracking cookies.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through the Service. Continued use of RepuFlow after changes constitutes acceptance of the updated policy.
10. Contact Us
If you have questions about this Privacy Policy, please contact us at privacy@repuflow.app.