Starly Reviews privacy policy

Starly Reviews (“the app”) is provided by Kyoforge, Da Nang, Vietnam (“we”). This policy explains what personal data the app processes on behalf of Shopify merchants (“merchants”) and their customers, and why. For data about customers, the merchant is the controller and we act as processor.

Data we process

• Merchant data: shop domain and name, store contact email, app settings, and product titles, handles and images used to show reviews.
• Review content submitted by customers: overall and per-criterion ratings, title, text, display name, optional email, optional photos, and the Shopify customer ID when the reviewer is logged in.
• Technical data: IP addresses are used transiently for abuse rate-limiting and are not stored (helpful votes keep only a one-way hash to prevent duplicate votes). Photo location data (EXIF/GPS) is removed on upload.

Why we process it

Only to provide the app’s features to the merchant: collecting, moderating, displaying and replying to reviews. We do not sell personal data, use it for advertising, send emails to customers, or use it to train AI models.

Customer choices

• Reviewer emails are never shown publicly.
• Customers can ask the merchant to access or delete their data; Shopify forwards these requests to us and we fulfil them automatically.

Retention and deletion

• Reviewer emails are removed after the merchant’s retention period (default 2 years).
• Customer redaction requests remove the reviewer’s identity, contact details and uploaded photos.
• When a merchant uninstalls the app, all shop data is permanently deleted 48 hours later (Shopify shop/redact).

Subprocessors

Security

Data is encrypted in transit (TLS) and at rest, including backups. Access is limited to staff who need it, protected by strong authentication, and logged. We maintain a security incident response process and will notify affected merchants without undue delay.

Contact

Questions or requests: support@thanhlabs.com. Last updated: November 11, 2026.