Privacy Policy

Optional website analytics

With your permission, our public website uses Google Analytics 4 to measure page visits, referral campaigns, demonstration interactions, and clicks leading to the Shopify App Store. Google Analytics uses first-party cookies and processes device, browser, approximate location, and interaction information. We do not send buyer order records, review submissions, email addresses, or private invitation links to website analytics.

Optional website analytics is disabled until you choose Allow analytics. You can reject it or change your choice using Analytics preferences at the bottom of the page. Advertising storage, Google signals, and advertising personalization are disabled in this website integration. Google processes analytics data under its applicable service and data processing terms.

Shopify App Store analytics

We use Google Analytics 4 to understand how merchants discover our Shopify App Store listing and proceed to installation. Shopify reports listing views, installation-button interactions, and completed installations. Completed-installation events may include the app identifier, shop identifier, shop name, and shop URL supplied by Shopify. Listing traffic may also include referral and campaign information.

Shopify controls collection on the App Store under its privacy and consent settings; the analytics preference on our website controls our website only. Google processes these analytics events to provide acquisition reporting. We do not send buyer order records, buyer email addresses, review submissions, or private invitation links through this installation-reporting integration.

Information we process

We process merchant shop details, app configuration, authentication and billing records needed to operate the service.

For fulfilled orders, we process the order and product identifiers, fulfillment details, and the buyer name and email address needed to verify a purchase and deliver a secure review invitation. Verity does not request or store buyer phone numbers.

When a buyer participates, we process the submitted video, rating, written review, consent choice, and technical metadata needed to upload and moderate the submission. Published widgets also collect limited interaction events, such as video plays, completion, product clicks, and add-to-cart actions, to provide directional analytics.

How we use information

We use information to provide and secure Verity: verify fulfilled purchases, send invitations, accept buyer submissions, let merchants moderate and publish approved reviews, provide support, and measure how published reviews are used. We also use the website and App Store analytics described above to understand merchant acquisition.

We do not sell personal information or use buyer order information for unrelated advertising.

Where information is stored and shared

Buyer video files are uploaded to the merchant’s Shopify Files library. Verity application records are stored in a private PostgreSQL database hosted by Supabase, and the application is hosted on Vercel. Resend is used to deliver transactional email. These providers process information only to supply their services to Verity and the merchant.

Google Analytics processes the website and Shopify App Store analytics described above. These analytics are separate from buyer review submissions and order processing.

Information may be processed in countries other than where a merchant or buyer is located. We use service providers and contractual protections appropriate to the information being processed.

Retention and deletion

Secure buyer invitation links expire after 30 days. Verity keeps application records while the merchant uses the service and for only as long as needed to provide the service, meet legal obligations, resolve disputes, and protect the service.

When Shopify sends a valid customer data request, Verity prepares the relevant app data for the merchant within 30 days. Valid customer redaction requests remove matching personal records. After uninstall, Shopify sends a shop-redaction request following its required waiting period; Verity then removes the shop’s application and session records. Videos already stored in Shopify Files remain under the merchant’s control and can be deleted by the merchant in Shopify.

Choices and rights

Buyers can decline an invitation, choose whether their submission may be displayed, and ask the merchant to access or remove personal information or submitted content. Merchants can contact Verity for help fulfilling privacy requests.

Depending on location, individuals may have rights to access, correct, delete, restrict, or object to processing. The merchant is normally the first point of contact for buyer requests because the merchant controls the Shopify store and order relationship.

Security and changes

Verity uses signed, expiring buyer links, authenticated merchant access, private application tables, and other safeguards designed to protect information. No security measure can guarantee absolute protection.

We may update this policy as the service or legal requirements change. The current version and its effective date will remain available on this page.