Effective Date: May 11, 2025
Last Updated: May 11, 2025
This Privacy Policy describes how Verifiedly (“we,” “us,” or “our”), operated by Merqio, collects, uses, and shares information when you install and use the Verifiedly app (“App”) available on the Shopify App Store.
—
1. Who This Policy Covers
This policy applies to:
– Merchants — Shopify store owners and their staff who install and configure Verifiedly.
– End Customers — Shoppers who receive review request messages or submit reviews through a merchant’s storefront.
—
2. Information We Collect
2a. Information Collected via Shopify APIs
When you install Verifiedly, we access the following data from Shopify’s APIs to provide core app functionality:
Data: Product listings (title, ID, images)
Purpose: Associate reviews with the correct product
──────────────────────────────
Data: Order information (order ID, fulfillment status, line items)
Purpose: Determine when and for which products to send review requests
──────────────────────────────
Data: Customer information (name, email address)
Purpose: Send post-purchase review request messages
──────────────────────────────
Data: Shop information (domain, currency, timezone)
Purpose: Configure the app for your store
We request only the Shopify API scopes necessary for these functions (read_products, read_orders, read_customers).
2b. Information Collected Directly from Merchants
When you configure Verifiedly, we collect and store:
– Widget settings — Display preferences, branding options, and review moderation settings.
– Integration API keys — If you connect Klaviyo or Attentive, we store your API key (encrypted at rest) to send review request events on your behalf.
– Billing information — Handled entirely by Shopify’s Billing API. We do not store payment card numbers or banking information.
– Usage logs — Records of review requests sent and their delivery status, for your reference in the Events Outbox.
2c. Information Collected from End Customers
When a customer submits a review through your storefront widget, we collect:
– Reviewer name (as provided)
– Star rating (1–5)
– Review title and body text
– Submission date and associated product
We do not install cookies, tracking pixels, or behavioral analytics scripts on your storefront through the Verifiedly widget.
—
3. How We Use This Information
We use the information collected solely to:
– Display and moderate product reviews on your storefront.
– Queue and deliver review request messages via your connected platforms (Klaviyo, Attentive).
– Generate AI-powered review summaries (Growth and Pro plans) using Claude. Review text is sent to Anthropic’s API (Claude) for this purpose and is subject to Anthropic’s privacy policy.
Provide the Shopify Flow “Review Published” trigger when a review is approved.
– Calculate aggregate ratings (average rating, review count) shown on product pages.
– Display usage metrics and review data within the Verifiedly merchant dashboard.
We do not sell merchant or customer data to third parties. We do not use collected data for advertising or profiling outside of your store’s review workflow.
—
4. Third-Party Services We Use
Verifiedly relies on the following sub-processors:
│ Service │ Purpose │ Privacy Policy │
Gadget.dev │ Backend infrastructure and database hosting │ gadget.dev/privacy
Shopify │ App platform, authentication, billing │ shopify.com/legal/privacy
Anthropic │ AI review summary generation (Growth/Pro plans) │ anthropic.com/privacy
Klaviyo │ Review request email delivery (if connected) │ klaviyo.com/legal/privacy
Attentive │ Review request SMS/email delivery (if connected) │ attentivemobile.com/privacy
Klaviyo and Attentive are only used if you explicitly connect them. You control whether these integrations are active and can disconnect them at any time from the Integrations page.
—
5. Data Retention
– Review data is retained for as long as your store has Verifiedly installed. You can delete individual reviews at any time from the Reviews page.
– Review request logs are retained for 90 days for troubleshooting purposes.
– Integration API keys are deleted immediately when you disconnect an integration.
– When you uninstall Verifiedly, all merchant and customer data associated with your store is deleted within 30 days, except where retention is required by applicable law.
—
6. Geographic Processing
Verifiedly is operated from the United States. Data is stored and processed on infrastructure provided by Gadget.dev, which is hosted on servers in the United States. If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, please be aware that your data may be transferred to and processed in the United States. By installing and using Verifiedly, you acknowledge this transfer. We rely on Standard Contractual Clauses or other lawful mechanisms where required for cross-border data transfers under GDPR.
We do not specifically market to or knowingly collect data from individuals in the EEA in a manner that triggers GDPR data controller obligations beyond what is outlined here. If you have questions about cross-border data transfers for your jurisdiction, please contact us.
—
7. Your Rights
Depending on your location, you or your customers may have rights regarding personal data, including:
– The right to access data we hold
– The right to request correction or deletion of data
– The right to object to or restrict certain processing
Merchants can delete review data directly from the Verifiedly dashboard. For other requests, or requests on behalf of your customers, contact us at the address below.
—
8. Shopify Data Compliance
Verifiedly responds to Shopify’s mandatory GDPR webhooks:
– Customer data requests — We will provide a report of customer data within 30 days of a request submitted through your Shopify admin.
– Customer data deletion — We will delete customer data within 30 days of a deletion request.
– Shop data deletion — We will delete all shop data within 30 days of app uninstallation.
—
9. Children’s Privacy
Verifiedly is not directed at children under the age of 13. We do not knowingly collect personal information from children.
—
10. Changes to This Policy
We may update this policy from time to time. When we do, we will update the “Last Updated” date at the top of this page.
Continued use of Verifiedly after changes are posted constitutes your acceptance of the revised policy.
—
11. Contact
For privacy-related questions or requests:
Email: support@merqio.com
Website: merqio.app
Merqio App 