Privacy Policy

Last Updated: November 29, 2024

This Privacy Policy describes how Google Seller Rating ("we", "our", or "us") collects, uses, and protects your information when you use our Shopify app. We are committed to protecting your privacy and ensuring compliance with applicable data protection laws, including GDPR and CCPA.

1. Information We Collect

1.1 Shop Information

When you install our app, we collect the following information:

• Shop domain (e.g., yourstore.myshopify.com)
• Shop access token (for API authentication)
• Installation date and status
• Selected plan information
• Onboarding status

1.2 Customer Rating Data

When customers submit ratings through our app, we collect:

• Order ID (to associate ratings with specific orders)
• Rating value (1-5 stars)
• Opt-in status for Google Seller Ratings
• Opt-in payload (may include customer email for Google opt-in)
• Timestamp of rating submission

1.3 Usage Data

We automatically collect certain information about how you use our app:

• App usage logs and analytics
• Error logs and debugging information
• API request logs

2. How We Use Your Information

We use the collected information for the following purposes:

• App Functionality: To provide and maintain our rating collection service
• Google Seller Ratings: To submit customer ratings to Google Merchant Center for seller rating display
• Analytics: To provide you with statistics and insights about your ratings
• Support: To respond to your inquiries and provide customer support
• Improvements: To improve our app and develop new features
• Compliance: To comply with legal obligations and enforce our terms

3. Data Storage and Security

3.1 Data Storage

Your data is stored securely using Cloudflare Workers and D1 Database. All data is encrypted in transit using HTTPS/TLS and stored in secure, access-controlled databases.

3.2 Data Retention

• Shop Information: Retained while your app is installed and for 30 days after uninstallation
• Rating Data: Retained indefinitely unless you request deletion or uninstall the app
• Logs: Retained for 90 days for debugging and support purposes

3.3 Security Measures

We implement industry-standard security measures to protect your data:

• Encryption of data in transit (HTTPS/TLS)
• Secure access tokens with limited scope
• Regular security audits and updates
• Access controls and authentication

4. Third-Party Services

4.1 Google Services

Our app integrates with Google Merchant Center to submit seller ratings. When customers opt-in to Google Seller Ratings, we may share the following information with Google:

• Order ID
• Customer email (if provided during opt-in)
• Rating value
• Delivery information (for Google Seller Ratings requirements)

Google's use of this information is governed by Google's Privacy Policy.

4.2 Shopify

We use Shopify's APIs to access your store data. Shopify's use of your information is governed by Shopify's Privacy Policy.

4.3 Cloudflare

Our app is hosted on Cloudflare Workers. Cloudflare's privacy practices are described in their Privacy Policy.

5. Your Rights (GDPR & CCPA Compliance)

You have the following rights regarding your personal data:

5.1 Right to Access

You can request a copy of all personal data we hold about you or your customers. We will provide this data in a structured, commonly used format within 30 days of your request.

5.2 Right to Rectification

You can request correction of any inaccurate or incomplete personal data we hold about you.

5.3 Right to Erasure (Right to be Forgotten)

You can request deletion of your personal data. We will delete your data within 30 days, except where we are required to retain it for legal or legitimate business purposes.

5.4 Right to Data Portability

You can request your data in a machine-readable format to transfer to another service.

5.5 Right to Object

You can object to processing of your personal data for certain purposes, such as direct marketing.

5.6 How to Exercise Your Rights

To exercise any of these rights, please contact us using the information provided in the "Contact Us" section below. We will respond to your request within 30 days.

6. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Service Providers: With trusted service providers who assist in operating our app (e.g., Cloudflare, Google)
• Legal Requirements: When required by law, court order, or government regulation
• Business Transfers: In connection with a merger, acquisition, or sale of assets (with notice to users)
• Consent: With your explicit consent for specific purposes

7. Children's Privacy

Our app is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

8. International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence. We ensure that appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable data protection laws.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date
• Sending you an email notification (if you have provided your email)
• Displaying a notice in the app

Your continued use of our app after any changes constitutes acceptance of the updated Privacy Policy.

10. Cookies and Tracking Technologies

Our app uses cookies and similar tracking technologies to:

• Maintain your session and authentication
• Remember your preferences
• Analyze app usage and performance

You can control cookies through your browser settings, but disabling cookies may affect app functionality.

11. Data Breach Notification

In the event of a data breach that may affect your personal information, we will:

• Notify affected users within 72 hours of becoming aware of the breach
• Report the breach to relevant data protection authorities as required by law
• Take immediate steps to contain and remediate the breach

12. Contact Us

13. Compliance

This Privacy Policy is designed to comply with:

• General Data Protection Regulation (GDPR) - European Union
• California Consumer Privacy Act (CCPA) - California, USA
• Personal Information Protection and Electronic Documents Act (PIPEDA) - Canada
• Shopify App Store Privacy Requirements

© 2024 Google Seller Rating. All rights reserved.