Who this covers
This policy explains how the Yorumix Shopify app handles data about the businesses that install it ("merchants") and the people who shop at those stores ("customers"). This website (yorumix.com) uses no cookies, ad trackers or analytics.
For customer data the merchant is the controller; Yorumix acts as a processor on the merchant's behalf and only on their instructions.
Shopify access scopes
Yorumix asks for these scopes only, each for the reason listed.
| Scope | Why |
|---|---|
write_products | Write the average rating and review count to the product's standard rating metafields, which your theme and Google read. |
read_orders | Schedule a review request after an order and match reviews to orders for the verified buyer badge. |
read_customers | Address the request email to the buyer by name. |
read_fulfillments | Track fulfilment status so the request goes out after delivery. |
What we store
| Data | Purpose | Source |
|---|---|---|
| Reviews | Publishing the review. Name, rating, text and media are public; email, order number and IP address are never shown and are kept only for verification and spam prevention. | Review form, order |
| Review requests | Order number, buyer name and email, product and send date, to send the request and one reminder on time. | Shopify order webhooks |
| Email log | Recipient, subject, body and delivery status, to know whether an email went out. | The app |
| Unsubscribe list | Email address, so we never email that person again. | The buyer |
| Store session and settings | Store domain, Shopify access token and app settings. | Installation |
We never store card or payment details, addresses or phone numbers. A visitor's "Helpful?" vote is remembered only in their own browser (localStorage) to stop double votes.
Webhooks
We receive these notifications from Shopify. Each one is verified with Shopify's HMAC signature; anything that fails verification is rejected.
orders/create, orders/paid, orders/fulfilled, fulfillments/update: to schedule the review request and time it to delivery.app/uninstalled: to delete the store's access token.app/scopes_update: to record scope changes.customers/data_request, customers/redact, shop/redact: see the GDPR section below.
GDPR and privacy requests
We handle Shopify's mandatory compliance webhooks as follows:
customers/data_request: We find the reviews and request records tied to that email and prepare them for the merchant.customers/redact: That person's review requests and email records are deleted, and their email and IP address are stripped from published reviews. If the review itself should go, the merchant deletes it in one click.shop/redact: All of the store's reviews, requests, email records, unsubscribe list, settings and session are deleted.
If you are a shopper, send your request to the store you bought from; the store passes it to us through Shopify. Merchants can email destek@yorumix.com; we complete requests within 30 days.
Retention and deletion
When the app is uninstalled (app/uninstalled) the store's access token is deleted immediately and Yorumix stops calling Shopify for that store. Shopify sends shop/redact 48 hours later; at that point every remaining record for the store is deleted from our database. If you want a copy of your reviews before uninstalling, write to us and we will send you a file.
Want it gone sooner? Email destek@yorumix.com from your store's address.
Sharing and sub-processors
We never sell or rent data or use it for advertising. Data lives only on the server that runs the app, and request emails are delivered through an email (SMTP) service. It is not shared with third parties unless the law requires it.
Security
All traffic is encrypted over HTTPS. Shopify access tokens stay on the server and are never sent to the browser. The admin screen is reachable only through the store's Shopify admin session.
Contact and changes
Questions: destek@yorumix.com. If we change this policy we publish the new version here and announce significant changes to installed stores inside the app.