Star Studded privacy policy
Star Studded adds product reviews, questions and answers, a loyalty program (points, VIP tiers and referrals) and customer surveys to Shopify stores. This policy explains what the app stores when a merchant installs it, why, how long it is kept and how it is deleted. The merchant who installs the app decides how it is used on their store and is the controller of their customers' data. We process that data on the merchant's behalf.
What we store
| Data | Why |
|---|---|
| Store details: the shop domain, an access token from Shopify, the plan and install dates. | To run the app for the store and apply the plan. |
| Customer name, email address and Shopify customer ID. | To show who wrote a review or question, send review requests and keep a loyalty account. |
| Order IDs, order dates, amounts and the products bought. | To award points, ask for reviews of the right products, mark reviews as verified buyers and count monthly orders for the plan. |
| Reviews, ratings, photos and videos, questions and answers. | To publish them on the store as the merchant chooses. |
| Points balances, history, tiers, reward codes and referrals. | To run the loyalty program. |
| Survey and quiz answers. | To give the merchant the results and, when the merchant offers one, a reward. |
| A log of emails sent (type, address, status). | To avoid duplicate emails and show the merchant what was sent. |
We do not sell personal data, use it for advertising, or combine data between stores. Each store's data is kept in its own database. Payment details are never seen by the app; billing is handled by Shopify.
Who we share it with
Only the services needed to run the features the merchant turns on: our hosting provider, an email delivery provider for review requests and loyalty emails, and, if the merchant connects them, the merchant's own Klaviyo, Google or Facebook accounts.
How long we keep it
Data is kept while the app is installed so the merchant's reviews and loyalty program keep working. The email log is trimmed after about 13 months. When the merchant uninstalls the app, Shopify sends us a shop deletion request 48 hours later and we delete the store's database and media.
Your rights and deletion
Customers can ask the store they bought from to see or delete their data. Shopify passes those requests to us:
- Data request: we prepare a file of everything the app holds about the customer for the merchant to send them.
- Deletion request: we delete the customer's loyalty account, points history, review requests, email log, survey and quiz answers. Reviews and questions they wrote stay on the store without their name, email or customer link.
- Store deletion: we delete all of the store's data.
Security
Data is sent over HTTPS. Shopify requests are checked with Shopify's signature before we act on them. Access to the admin requires the merchant's Shopify login.
Contact
Questions about this policy or a data request: support@starstudded.app.