Privacy Policy

Last updated: May 17, 2025

Ratify ("we", "our", or "the app") is a Shopify application developed by Pikuizee. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data.

1. Data We Collect

When a merchant installs Ratify, we collect and store:

• Shop information: shop domain, Shopify access token, and plan details.
• Order data: customer email, customer name, and purchased product information — used solely to send review request emails.
• Review content: star ratings, review text, titles, and any photos or videos customers submit.
• Q&A content: customer questions and merchant answers submitted through the Q&A widget.
• Email preferences: unsubscribe requests from customers who opt out of review request emails.

2. How We Use Data

• To send automated post-purchase review request emails to customers on behalf of the merchant.
• To display reviews and ratings on the merchant's storefront.
• To provide merchants with review management tools in their Shopify admin.
• To generate AI-assisted review summaries and reply suggestions (processed via Anthropic's API; no data is retained by Anthropic for training).

3. Data Sharing

We do not sell customer or merchant data to third parties. Data may be shared with the following service providers solely to operate the app:

• Resend — transactional email delivery.
• Cloudinary — photo and video storage for review media.
• Anthropic — AI text generation for summaries and reply suggestions.
• Klaviyo / Omnisend — only if the merchant explicitly configures their API key in settings.

4. Data Retention and Deletion

Merchants can request deletion of their store data at any time by contacting us. We process GDPR-mandated data deletion requests via Shopify's mandatory webhook topics (customers/redact, shop/redact). Customer review data is deleted within 30 days of a verified redact request.

5. Customer Rights (GDPR)

If you are a customer of a store using Ratify and wish to request access to or deletion of your personal data, please contact the store directly. Merchants may forward verified requests to us at support@pikuizee.com.

6. Security

All data is transmitted over HTTPS/TLS. Shopify access tokens are stored encrypted at rest in our database. We verify all incoming Shopify webhooks using HMAC-SHA256 signatures.

7. Contact

For privacy-related questions, contact us at support@pikuizee.com.