Privacy Policy

1. Introduction

ProofBoost ("we", "our", or "us") operates a Shopify product reviews application available at apps.shopify.com/proofboost and a marketing website at proofboost.app. This Privacy Policy explains how we collect, use, disclose, and protect information when you install or use our app, or visit our website.

By installing the ProofBoost app or using our services, you agree to the terms of this Privacy Policy.

2. Information We Collect

From Shopify merchants (store owners):

• Store name, domain, email address, and Shopify store ID
• Order data (order IDs, order dates, product names and IDs) used to send review request emails
• Customer email addresses and names — solely to send review request emails on your behalf
• App configuration settings (email timing, widget appearance, etc.)

From shoppers (end customers leaving reviews):

• Name (or display name) and email address submitted with a review
• Review text, star rating, and any photos submitted
• Date and time of submission

Automatically collected data:

• Log data (IP addresses, browser type, pages visited on proofboost.app) for security and analytics purposes
• Cookies and similar technologies to maintain session state in our dashboard

3. How We Use Your Information

• To provide the ProofBoost service: displaying reviews, sending review request emails, and powering the merchant dashboard
• To improve and maintain the app — debugging issues, monitoring performance, and developing new features
• To send transactional communications (e.g., emails about your account, service updates)
• To comply with legal obligations

We do not sell your data or your customers' data to third parties. We do not use customer email addresses for any purpose other than sending review request emails on behalf of the merchant.

4. Data Sharing

We share data only with the following categories of service providers, strictly to operate our service:

• Shopify — our app is built on the Shopify platform and operates under Shopify's Privacy Policy
• Railway.app — our hosting and infrastructure provider (servers located in the United States)
• Resend — transactional email delivery service used to send review request emails
• Neon / PostgreSQL — our database provider for storing reviews, orders, and settings

All service providers are bound by data processing agreements and are prohibited from using your data for their own purposes.

5. Data Retention

We retain merchant and review data for as long as your store has ProofBoost installed. When you uninstall the app, we will delete your store's data within 30 days, unless retention is required by law.

You may request deletion of your data at any time by emailing support@proofboost.app.

6. Security

We take reasonable technical and organizational measures to protect your data, including encrypted connections (HTTPS/TLS), environment-variable–based secret management, and access controls on our infrastructure. No system is 100% secure; we encourage you to use strong passwords and notify us immediately if you suspect unauthorized access.

7. Shoppers' Rights (End Customers)

If a shopper at a ProofBoost-powered store wishes to access, correct, or delete a review they submitted, they should contact the store directly. Merchants can delete individual reviews from their ProofBoost dashboard. We will process deletion requests forwarded to us by merchants within 30 days.

8. Merchants' Rights (GDPR / CCPA)

If you are a merchant in the European Economic Area, United Kingdom, or California, you have rights including:

• Right to access the personal data we hold about you
• Right to rectify inaccurate data
• Right to erasure ("right to be forgotten")
• Right to data portability
• Right to object to certain processing

To exercise any of these rights, email support@proofboost.app. We will respond within 30 days.

9. Children's Privacy

ProofBoost is a business-to-business service intended for Shopify merchants. We do not knowingly collect personal information from individuals under 16 years of age.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify active merchants by email or in-app notice at least 14 days before material changes take effect. Continued use of the app after that date constitutes acceptance of the updated policy.

11. Contact Us