Privacy Policy

1. Introduction

Uenhance Technologies ("we," "us," or "our") operates the Review.ai (Uenhance) application for Shopify merchants. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our Shopify application. This policy applies to all merchants and their customers who interact with our services.

2. Information We Collect

2.1 Store Information

When you install our app, we collect:

• Shop domain and Shopify store ID
• Store configuration and settings
• Billing and subscription information
• Store owner email address
• OAuth access tokens for API access

2.2 Customer Review Data

When customers submit reviews through our system:

• Customer name and email address
• Review content, ratings, and titles
• Product IDs associated with reviews
• Order IDs and customer IDs (when provided)
• IP addresses and submission timestamps

2.3 Image and Video Data

• Original images uploaded by customers
• AI-enhanced versions of images
• Style reference images uploaded by merchants
• Generated video content
• Image metadata and processing history

2.4 Analytics and Usage Data

• Number of images processed
• Number of videos generated
• Feature usage statistics
• API call logs and performance metrics

3. How We Use Information

We use collected information to:

• Provide AI-powered image enhancement services
• Generate videos from enhanced images
• Process and display customer reviews
• Manage billing and subscriptions through Shopify
• Send transactional emails about the service
• Provide customer support
• Monitor and improve service performance
• Comply with legal obligations

4. Third-Party Services and Data Sharing

We share data with the following third-party services to provide our functionality:

4.1 OpenAI

• Purpose: AI-powered image analysis and enhancement
• Data Shared: Images for processing (not stored by OpenAI)
• Privacy Policy: https://openai.com/privacy

4.2 Cloudinary

• Purpose: Image storage, CDN, and transformation
• Data Shared: All uploaded and processed images
• Data Location: United States and EU data centers
• Privacy Policy: https://cloudinary.com/privacy

4.3 Kling AI

• Purpose: Video generation from images
• Data Shared: Enhanced images and generation prompts
• Privacy Policy: Available at Kling AI website

4.4 Review Platforms (when configured)

Merchants may connect:

• Yotpo, Judge.me, Okendo, Loox, Stamped.io, Trustpilot
• Data Shared: Review content and customer information as configured by merchant

4.5 Shopify

• Purpose: App hosting, billing, and merchant services
• Data Shared: Store information, billing data
• Privacy Policy: https://www.shopify.com/legal/privacy

5. Data Retention

• Store Data: Retained while subscription is active
• Images: Retained for 90 days after processing
• Videos: Retained for 90 days after generation
• Review Data: Retained indefinitely unless deletion requested
• Analytics: Aggregated data retained for 24 months

Upon app uninstallation, all data is deleted within 48 hours per Shopify requirements.

6. Data Security

We implement industry-standard security measures including:

• TLS/SSL encryption for all data transfers
• Encrypted database storage
• Regular security audits and updates
• Access controls and authentication
• Rate limiting and DDoS protection
• HMAC verification for webhook endpoints

7. GDPR Compliance (EU Residents)

For EU residents, we comply with GDPR requirements:

7.1 Legal Basis for Processing

• Contract Performance: Processing necessary to provide our services
• Legitimate Interests: Improving services and preventing fraud
• Consent: For marketing communications (when applicable)

7.2 Your Rights

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate data
• Erasure: Request deletion of your data
• Portability: Receive data in a portable format
• Objection: Object to certain processing
• Restriction: Limit processing of your data

7.3 Data Transfers

Data may be transferred to servers in the United States. We ensure appropriate safeguards through Standard Contractual Clauses with our service providers.

8. CCPA Compliance (California Residents)

California residents have additional rights under CCPA:

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of sale (we do not sell personal data)
• Right to delete personal information
• Right to non-discrimination

9. Data Processing for Merchants

Merchants act as data controllers for their customer data. We act as a data processor, processing data on behalf of merchants according to their instructions and this policy.

10. Automated Decision Making

Our AI enhancement features involve automated processing of images to improve quality. This processing does not involve personal data profiling or decisions that significantly affect individuals.

11. Sessions and Tracking

We use secure, server-side sessions stored in our database. We don't rely on third-party cookies or browser local storage for authentication. The app functions in Chrome Incognito and other environments that block third-party cookies.

We do not use tracking cookies or share data with advertising networks.

12. Children's Privacy

Our service is not directed to individuals under 18. We do not knowingly collect personal information from children. If we discover we have collected information from a child, we will delete it immediately.

13. Webhooks and Data Deletion

We support Shopify's mandatory webhooks:

• customers/redact: Deletes customer data upon request
• customers/data_request: Provides customer data for GDPR requests
• shop/redact: Deletes all shop data within 48 hours of request

14. International Data Transfers

Your data may be processed in the following locations:

• United States (primary servers and AI processing)
• European Union (CDN and backup storage)
• Your local region (Cloudinary CDN endpoints)

15. Changes to This Policy

We may update this policy periodically. We will notify merchants of significant changes via email or through the app dashboard. Continued use after changes constitutes acceptance of the updated policy.

16. Contact Information

For privacy-related questions or to exercise your rights:

• Email: support@uenhance.com
• Data Protection Officer: privacy@uenhance.com
• Shopify App Support: Through Shopify App Store

17. Supervisory Authority

EU residents have the right to lodge a complaint with their local data protection authority if they believe their rights have been violated.

This privacy policy was last updated on February 24, 2026 and applies to Review.ai (Uenhance)version 1.0 and later.