Privacy Policy

Replyglot is operated by NDUP Reviews ("we", "us"). This policy explains what data the Replyglot Shopify app ("the App") collects, how we use it, and the choices you have.

Effective date: 2026-06-06

1. Who this policy covers

It covers two groups: merchants who install the App on their Shopify store, and shoppers who submit product reviews through a store that uses the App.

2. What we collect

When a merchant installs the App, we store:

• The store's myshopify.com domain and the access token needed to run the App.

When a shopper submits a review, we store the review they provide:

• Reviewer name and, if supplied, reviewer email address.
• Star rating, review title and text, the language of the review.
• URLs of any photos the shopper attaches to the review.
• The product the review is about and the store it was submitted to.

We do not collect payment card details, and we do not read or modify any Shopify Admin resources (the App requests no Shopify access scopes).

3. How we use it

• To store, display and let merchants moderate their product reviews.
• To generate suggested reply drafts that the merchant can edit and choose to publish. Review text, and any attached review images, may be sent to trusted third-party artificial-intelligence service providers solely to generate that draft. We do not use this data to train models. A current list of these sub-processors is available on request at support@nduplink.com.

4. Sharing

We do not sell personal data. We share data only with: Shopify (the platform the App runs on) and the AI service providers described above, and only to the extent needed to provide the App.

5. Retention and deletion

Review data is retained while the merchant uses the App. We honour Shopify's mandatory data-protection requests:

• Customer redaction: when Shopify notifies us that a shopper requests erasure, we delete that shopper's stored reviews for the store.
• Shop redaction: when a store is closed or the App is uninstalled, we delete the store's reviews and session data.
• Data requests: when a shopper requests a copy of their data, the store owner can contact us at support@nduplink.com.

6. Your rights

Depending on where you live (e.g. under GDPR or CCPA), you may have the right to access, correct, or delete your personal data. To exercise these rights, contact us at support@nduplink.com or ask the store you reviewed to submit the request through Shopify.

7. Security

Data is transmitted over HTTPS and access tokens are stored server-side. No method of transmission or storage is perfectly secure, but we take reasonable measures to protect your data.

8. Changes

We may update this policy; material changes will be reflected by a new effective date above.

9. Contact

Questions about this policy: support@nduplink.com.