Legal
Privacy Policy
Last updated: June 10, 2026
This Privacy Policy explains how Revova (“we”, “our”, “us”) collects, uses, and protects information when you use our Shopify application and website at revova.app. By installing the app or using our services, you agree to this policy.
1. Who We Are
Revova is a Shopify application that helps merchants collect and manage product reviews. We act as a data processor for merchants (our customers) and as a data controller for our own marketing and operational data. Contact us at support@revova.app.
2. Data We Collect
From merchants (app users)
- Account information: name, email address, shop domain
- Billing information: handled entirely by Shopify — we do not store payment details
- Store data via Shopify API: product listings, order history (for Verified Purchase only), customer emails (for review request emails), collection and tag data
- App configuration: form templates, assignment rules, widget settings
- Usage data: feature interactions, dashboard page views, error logs
From end customers (your shoppers)
- Review content: star ratings, text responses, custom field answers, photos, and videos submitted through review forms
- Identity: name and email address submitted with a review
- Order verification data: email matched against order history solely to determine Verified Purchase status
3. How We Use Your Data
- To provide and operate the Revova app and its features
- To send post-purchase review request emails on behalf of merchants
- To verify purchase status against Shopify order records
- To generate AI-powered analytics, sentiment analysis, and reply suggestions
- To communicate with merchants about their account, billing, and updates
- To detect fraud, spam, and abuse
- To comply with legal obligations
We do not sell your data to third parties. We do not use shopper data for advertising.
4. Shopify Data Access
Revova requests the following Shopify API scopes: read_products, read_orders, read_customers, write_script_tags. We access order data solely to verify purchase status. We do not store full order records — only the data needed to confirm a purchase occurred.
5. Data Retention
- Review data is retained for as long as your Revova account is active
- Upon account deletion or app uninstall, review data is deleted within 30 days
- Backups are purged within 90 days of deletion
- You may request earlier deletion at any time by contacting us
6. Third-Party Services
We use a limited set of sub-processors to deliver our service, including cloud infrastructure and analytics tools. Each sub-processor is bound by data processing agreements consistent with GDPR. A current list is available on request.
7. Your Rights Under GDPR
If you are located in the EEA or UK, you have the right to access, rectify, erase, port, or object to the processing of your personal data. To exercise any right, contact us at support@revova.app. We will respond within 30 days.
8. Cookies
Our website uses minimal functional cookies required for session management. We do not use advertising or tracking cookies. See our Cookie Policy for details.
9. Security
We use TLS encryption in transit, encryption at rest, and access controls. If you believe a security incident has occurred, contact us immediately.
10. Changes to This Policy
We will notify active merchants of material changes by email at least 14 days before they take effect.
11. Contact
Email us at support@revova.app or visit revova.app/support.