Privacy and data
Data and privacy
Sofcy Reviews keeps what it needs to collect, verify and show reviews, and no more. It does not sell personal data.
What is stored
| Data | What it is |
|---|---|
| Reviewers | Display name, and email address. The email is encrypted, with a separate one-way key used only to look it up. If the reviewer is a Shopify customer, their customer ID and language. |
| Reviews and questions | Rating, title, text, photos, videos and YouTube links, your replies, tags, pin and feature flags, and helpful-vote counts. |
| Order evidence | For review requests: the order, line item, product, quantity and price. This is how requests are scheduled and how a buyer is verified. |
| Consent | When a reviewer agrees to publication: the purpose, the form, the policy version and the time. No IP address or browser details. |
| Helpful votes | An anonymous key per browser, so one browser gets one vote per review. No IP address or customer details are stored. |
| Attribution | That a review-request link was visited, and the order and revenue that followed. |
| Rewards | Coupon and referral codes, and which customer they belong to. |
What Sofcy reads from your store
The app asks Shopify for these permissions, and uses each one only for the reason given:
| Permission | Why |
|---|---|
| Products (read and write) | Keep the product list in sync, and save each product's rating summary on the product so widgets load fast. |
| Orders | Find fulfilled and paid orders to schedule review requests, mark verified buyers, and count revenue from requests. |
| Fulfillments | Know when an order is delivered, for the After delivery request timing. |
| Themes | List your themes in Settings › Widgets and check whether Sofcy blocks are installed. |
| App proxy | Serve reviews and the review form on your storefront at /apps/sofcy-reviews. |
| Discounts | Create coupon codes for reviews and referral codes. |
Shopify privacy requests
When a customer asks you to see or delete their data, use Shopify's customer privacy tools. Shopify tells Sofcy, and Sofcy acts on it without you doing anything in the app.
- Data request. Sofcy gathers everything it holds about that customer: reviews, requests, questions, consent records, coupons and referral codes. The export is kept encrypted for 7 days.
- Customer erasure. Sofcy deletes the customer's photos and videos, coupon and referral codes, consent records and attribution, and removes the order details from their requests. Their name becomes Anonymous reviewer and their email is removed. The text and rating of their reviews stay, unattributed, and they are no longer marked verified.
- Shop erasure. After you uninstall, Shopify asks Sofcy to delete your store's data. Sofcy deletes all of it: reviews, media, reviewers, requests, questions, settings and the rest. See Uninstalling.
Reviewers' choices
- Every review email has an unsubscribe link. Once a reviewer unsubscribes, Sofcy cancels their scheduled requests and reminders and never emails them again from your store. They can still write a review on your store.
- A reviewer must tick I agree that my review and display name can be published before they can submit.
Questions
Email yadav.creators@gmail.com with any question about how Sofcy handles personal data.