Privacy Policy
Lean Reviews — Last updated: February 2026
Lean Reviews (“we”, “our”, “the app”) is a Shopify app that enables merchants to collect, manage, and display customer reviews. This policy explains what data we collect, how we use it, and your rights in relation to it.
1. Data We Collect
When a merchant installs Lean Reviews, we collect and store the following:
- Store information — your Shopify store URL and app configuration settings.
- Customer review data — reviewer name, email address, star rating, review title, review content, and the product or order being reviewed.
- Customer photos — images optionally attached to reviews, uploaded to and stored on Cloudinary.
- Order data — order IDs, accessed read-only from Shopify, used only to verify that a reviewer has purchased the product they are reviewing.
- Customer account identifiers — Shopify customer IDs, used only for verified purchase checks and duplicate review prevention.
We do not collect payment information, browsing history, or any data unrelated to the review functionality.
2. How We Use Data
- To store and display reviews on your storefront.
- To send review request emails to customers (when enabled by the merchant via Shopify Flow).
- To generate discount codes as review incentives (when enabled by the merchant).
- To verify that reviewers have purchased the product they are reviewing.
- To prevent spam and duplicate submissions.
We do not sell, rent, or share personal data with third parties for marketing purposes.
3. Third-Party Services
We use the following third-party services to operate the app:
4. Data Retention
Review data is retained for as long as a merchant’s store has the app installed. When the app is uninstalled, we process a deletion request within 30 days in accordance with Shopify’s data protection requirements. Merchants may also contact us at any time to request deletion of their store’s data.
5. Merchant Responsibilities
Merchants using Lean Reviews act as the data controller for their customers’ personal data. It is the merchant’s responsibility to ensure their own privacy policy discloses the use of review collection tools and complies with applicable laws including GDPR, CCPA, and any other relevant data protection regulations in their jurisdiction.
6. Your Rights
If you are a customer whose data has been collected via a review submission, you may contact the merchant directly to request access to, correction of, or deletion of your personal data. Merchants can delete individual reviews and associated data from within the Lean Reviews admin panel.
7. Contact
For privacy-related questions or data deletion requests, please contact us at: kpatemanapps@gmail.com
8. Data Processing Terms
By installing Lean Reviews, a merchant agrees to this Privacy Policy and to the following terms, which govern how we handle their customers’ personal data on the merchant’s behalf.
- The merchant is the data controller for their customers’ personal data; Lean Reviews acts only as a data processor, handling that data solely to provide the merchant with the review collection and display features described above.
- We will only use customer data for the purposes described in this policy, and only as instructed by the merchant through their use of the app’s features and settings.
- We will not sell, rent, or share customer data with any third party beyond the service providers listed in Section 3, who process it solely to help us operate the app.
- We will delete customer data when the merchant or customer requests it, and process deletion within 30 days of the app being uninstalled, as described in Section 4.
- We will notify the merchant without undue delay if we become aware of a security incident affecting their customers’ personal data.
- The merchant remains responsible for their own storefront privacy policy and for complying with data protection laws that apply to their business, as described in Section 5.