Privacy policy

1. Who this policy covers

ReviewSpring is a Shopify review and customer-feedback application provided by am2pm. This policy applies to merchants who install the app, people who use the ReviewSpring website, and shoppers whose information is processed for a merchant using ReviewSpring.

A Shopify merchant normally decides why shopper information is used and is the controller of that information. ReviewSpring processes it on the merchant’s instructions to provide the service.

2. Information we process

• Merchant and shop information: shop identity, domains, locale, time zone, currency, billing status, settings, and authorised Shopify account details.
• Catalogue and order information: products, variants, orders, fulfilment status, and customer contact details needed to schedule and send review requests.
• Review content: ratings, written reviews, questions, answers, replies, uploaded media, display names, verification details, and moderation status.
• Service activity: request delivery, opens, clicks, unsubscribes, widget events, diagnostic logs, device or browser data, and fraud-prevention signals such as IP address when collected.
• Integration information: configuration and credentials a merchant provides for optional connected services.

3. How we use information

We use information to:

• operate, secure, troubleshoot, and improve ReviewSpring;
• collect, verify, moderate, display, import, export, and analyse reviews;
• schedule and deliver review requests and merchant notifications;
• provide widgets, reporting, coupons, referrals, APIs, and integrations;
• manage subscriptions and comply with legal obligations; and
• respond to support, privacy, abuse, and security requests.

ReviewSpring does not sell merchant or shopper personal information.

4. Service providers and disclosures

We may share information with Shopify and with infrastructure, storage, email, security, analytics, and integration providers used to operate the service. Optional providers receive information only when a merchant enables the relevant feature. We may also disclose information when required by law, to protect rights or safety, or as part of a business transaction subject to appropriate safeguards.

5. Retention and deletion

We keep information while a merchant account is active and for as long as it is reasonably needed to provide the service, resolve disputes, prevent abuse, or meet legal obligations. Uninstalling the app stops scheduled work and removes active sessions. Shopify’s mandatory privacy webhooks are used to handle customer data access, customer redaction, and shop redaction requests.

See the data deletion page for the request path that applies to you.

6. Security and international processing

ReviewSpring uses access controls, encrypted connections, credential protection, and service monitoring appropriate to the information it processes. No online service can guarantee absolute security. Information may be processed in countries other than where a merchant or shopper lives; where required, suitable transfer safeguards are used.

7. Your choices and rights

Shoppers should first contact the Shopify merchant whose store collected the information. Merchants can export or manage information in ReviewSpring and can submit privacy requests through Shopify. Depending on location, a person may have rights to access, correct, delete, restrict, or object to processing, and to complain to a data-protection authority.

8. Updates and contact

We may update this policy as ReviewSpring or legal requirements change. The latest version will remain on this page with its updated date. For privacy questions, use the ReviewSpring support page and mark the request as a privacy matter.