Protected customer data
ReviewLift is Protected Customer Data Level 1.
What we access
- read_products — your catalog and your connected review app's metafields (review counts + average ratings per product).
- read_orders — used ONLY to compute units sold per product over a trailing window. We sum quantity by product and discard the rest in the same step.
What we store
- Per-product aggregates: title, review count, average rating, units sold (integers).
- Coverage snapshots (coverage %, rating distribution, ranked gaps).
We do not store customer names, emails, addresses, order IDs, or line-item rows. No customer PII is retained at any point.
Data deletion
On app uninstall and on Shopify's shop/redact webhook, we delete all data for your shop. The customers/redact and customers/data_request webhooks are answered truthfully: we hold no customer data to redact or return.