Legal & Policy Center
The Privacy Policy and Terms of Service for Recometic Loyalty & Reviews.
Privacy Policy
Last updated: July 15, 2026
1. Information we collect
To provide our loyalty, rewards, and review services, we collect and process customer and merchant data when the app is installed on a Shopify store:
- Customer profile data. We request access to customer details such as names and email addresses. We specifically do not collect or request phone numbers or physical addresses, to keep data collection to the minimum our features require.
- Purchase data. We access order information — product ID, quantity, and purchase amounts — to calculate loyalty points and trigger review invitations.
- Review content. We store customer reviews, star ratings, and uploaded media (photo and video reviews) to showcase on your storefront.
2. How we use your data
We process this information strictly to perform the contract with merchants and deliver the service:
- Managing loyalty accounts, tracking lifetime customer points, and generating discount reward codes.
- Sending automated review requests and loyalty notification emails.
- Displaying user-generated reviews, media, and badges on your Shopify storefront.
- Syncing event data to connected third-party integrations (such as Klaviyo and Mailchimp) as authorized by the merchant.
3. Data sharing and third parties
We do not sell, rent, or trade your personal data. We share customer data only with trusted service providers essential to running the app:
- Cloudflare R2. Our content delivery network, used to securely host review images and videos.
- PostgreSQL. Secure, encrypted transactional database storage.
- Nodemailer / SMTP gateways. Used solely to dispatch transactional notifications when direct mail sending is enabled.
4. GDPR & CCPA compliance
We fully support data protection rights. Customers and merchants can contact us to request access, correction, transfer, or deletion of their personal information. When a merchant requests deletion, we purge all store customer profile data in strict accordance with Shopify's mandatory privacy webhooks (Customer Data Erasure, Shop Data Erasure, and Customer Data Request). To preserve merchant SEO and product ratings, deleted customer reviews are not removed but are fully anonymized by stripping all personally identifiable information such as names and email addresses.
Security assurance. All data in transit is encrypted using TLS 1.3, and database records at rest are secured with AES-256 encryption. We enforce strict access controls to prevent unauthorized access.
Questions about these policies? Reach out to contact@recometic.com