Privacy Policy

Lean Reviews — Last updated: February 2026

Lean Reviews (“we”, “our”, “the app”) is a Shopify app that enables merchants to collect, manage, and display customer reviews. This policy explains what data we collect, how we use it, and your rights in relation to it.

1. Data We Collect

When a merchant installs Lean Reviews, we collect and store the following:

• Store information — your Shopify store URL and app configuration settings.
• Customer review data — reviewer name, email address, star rating, review title, review content, and the product or order being reviewed.
• Customer photos — images optionally attached to reviews, uploaded to and stored on Cloudinary.
• Order data — order IDs, accessed read-only from Shopify, used only to verify that a reviewer has purchased the product they are reviewing.
• Customer account identifiers — Shopify customer IDs, used only for verified purchase checks and duplicate review prevention.

We do not collect payment information, browsing history, or any data unrelated to the review functionality.

2. How We Use Data

• To store and display reviews on your storefront.
• To send review request emails to customers (when enabled by the merchant via Shopify Flow).
• To generate discount codes as review incentives (when enabled by the merchant).
• To verify that reviewers have purchased the product they are reviewing.
• To prevent spam and duplicate submissions.

We do not sell, rent, or share personal data with third parties for marketing purposes.

3. Third-Party Services

We use the following third-party services to operate the app:

• Fly.io — application hosting and database storage. Data is stored in the United States. See fly.io/legal/privacy-policy.
• Cloudinary — image storage and delivery for customer-uploaded review photos. See cloudinary.com/privacy.
• Resend — transactional email delivery for review request emails. See resend.com/legal/privacy-policy.

4. Data Retention

Review data is retained for as long as a merchant’s store has the app installed. When the app is uninstalled, we process a deletion request within 30 days in accordance with Shopify’s data protection requirements. Merchants may also contact us at any time to request deletion of their store’s data.

5. Merchant Responsibilities

Merchants using Lean Reviews act as the data controller for their customers’ personal data. It is the merchant’s responsibility to ensure their own privacy policy discloses the use of review collection tools and complies with applicable laws including GDPR, CCPA, and any other relevant data protection regulations in their jurisdiction.

6. Your Rights

If you are a customer whose data has been collected via a review submission, you may contact the merchant directly to request access to, correction of, or deletion of your personal data. Merchants can delete individual reviews and associated data from within the Lean Reviews admin panel.

7. Contact

For privacy-related questions or data deletion requests, please contact us at: kpatemanapps@gmail.com