Effective date: May 11, 2026
Last updated: Nov 13, 2026
Verifiedly (“the app”, “we”, “us”) is a Shopify app for verified-purchase product reviews: it asks customers for reviews after they buy, and shows those reviews on the merchant’s storefront. This policy explains what data the app collects, why, how long it is kept, and how to have it deleted.
Verifiedly is operated by Merqio.App.
Questions about this policy or about your data: support@merqio.app.
1. Who this policy is for
Two groups of people are described here, and the app treats them differently:
- Merchants — the Shopify store owners and staff who install and configure Verifiedly.
- Shoppers — the customers of those stores, who receive review requests or submit reviews.
Verifiedly is a data processor acting on the merchant’s instructions for shopper data. The merchant remains the data controller for their own customers.
2. What the app accesses from Shopify
When a merchant installs Verifiedly, they grant these access scopes. Each is listed with the reason it is needed:
| Scope | Why the app needs it |
|---|---|
read_products | Associate each review with the right product |
write_products | Save each product’s rating summary to the product, so the storefront can show it |
read_orders | Decide when, and for which products, to send a review request |
read_customers | Address the review request to the customer who placed the order |
read_discounts / write_discounts | Create the discount code a merchant may offer as a thank-you for a review |
Verifiedly never requests or receives payment card details. Billing is handled entirely by Shopify.
3. What the app stores
Data synced from the merchant’s Shopify store
Products (title, ID, images), orders (ID, fulfillment status, line items), customers’ names and email addresses, and shop details (domain, currency, timezone).
Data the merchant creates in the app
Widget display and moderation settings, and review request logs (which requests were sent and their delivery status). If a merchant connects Klaviyo or Attentive, the app stores that service’s API key in order to send review request events on the merchant’s behalf.
Data collected when a shopper leaves a review
- Reviewer name, as provided
- Star rating (1–5)
- Review title and text
- Submission date and the product reviewed
The Verifiedly storefront widget does not install cookies, tracking pixels, or behavioural analytics scripts.
4. How the data is used
Data is used only to:
- Display and moderate product reviews on the merchant’s storefront, and calculate average ratings and review counts.
- Send review requests by email, or through the merchant’s connected Klaviyo or Attentive account.
- Write AI review summaries (Growth and Pro plans).
- Trigger the Shopify Flow “Review Published” event when a review is approved.
- Show review data and usage metrics in the merchant’s dashboard.
Data is not used to train machine-learning models, is not sold, rented, or shared for advertising, and is not used for any purpose beyond serving the merchant who collected it.
5. Who else the data goes to
| Recipient | Purpose |
|---|---|
| Shopify | Source of the data, the platform the app runs on, and billing |
| Gadget (gadget.dev) | Application hosting, database, and logging |
| Resend (resend.com) | Delivering review request emails; receives the customer’s name, email address, and the email’s content |
| Anthropic (Claude API) | Writing AI review summaries (Growth and Pro plans); receives review text |
| Klaviyo or Attentive | Only if the merchant connects one: delivering review requests by email or SMS |
Klaviyo and Attentive are used only if the merchant connects them, and can be disconnected at any time from the Integrations page.
No other subprocessors receive this data. If that changes, this policy will be updated before the change takes effect.
6. Retention and deletion
Reviews are kept for as long as Verifiedly is installed, and merchants can delete any review from the Reviews page. Review request logs are kept for 90 days for troubleshooting. A connected service’s API key is deleted as soon as the integration is disconnected.
Verifiedly implements Shopify’s three mandatory privacy webhooks.
shop/redact — after a merchant uninstalls. All merchant and shopper data for the store is deleted within 30 days, except where retention is required by law.
customers/redact — when a shopper exercises their right to erasure. That shopper’s data is deleted within 30 days.
customers/data_request — when a shopper asks what data is held. We assemble everything held for that shopper and deliver it to the store owner within 30 days.
Merchants may request deletion at any time without uninstalling, by contacting support@merqio.app.
7. Security
Data is transmitted over TLS, and access to a store’s data is limited to that store’s authenticated sessions.
8. Your rights
Depending on where you live, you may have the right to access, correct, delete, or export your personal data, to object to or restrict its processing, and to lodge a complaint with a supervisory authority.
Shoppers should contact the store they purchased from — that merchant is the controller of their data. The merchant’s request reaches us automatically through Shopify’s privacy webhooks.
Merchants can contact support@merqio.app directly.
Merchants can also delete review data directly from the Verifiedly dashboard.
Under the GDPR, our lawful basis for processing is the performance of our contract with the merchant, and the merchant’s own lawful basis for processing their customers’ data.
9. International transfers
Data is stored on infrastructure operated by our hosting provider in the United States. Where data is transferred out of the UK, EEA, or Switzerland, the transfer relies on the applicable safeguards, including the European Commission’s Standard Contractual Clauses.
10. Children
Verifiedly is a business tool and is not directed at children. We do not knowingly collect personal data from anyone under 13.
11. Changes to this policy
If this policy changes materially, we will update the date above and notify merchants through the app or by email before the change takes effect.
12. Contact
Merqio.App
support@merqio.app