Privacy Policy

Information we process

We process merchant shop details, app configuration, authentication and billing records needed to operate the service.

For fulfilled orders, we process the order and product identifiers, fulfillment details, and the buyer name and email address needed to verify a purchase and deliver a secure review invitation. Verity does not request or store buyer phone numbers.

When a buyer participates, we process the submitted video, rating, written review, consent choice, and technical metadata needed to upload and moderate the submission. Published widgets also collect limited interaction events, such as video plays, completion, product clicks, and add-to-cart actions, to provide directional analytics.

How we use information

We use information only to provide and secure Verity: verify fulfilled purchases, send invitations, accept buyer submissions, let merchants moderate and publish approved reviews, provide support, and measure how published reviews are used.

We do not sell personal information or use buyer order information for unrelated advertising.

Where information is stored and shared

Buyer video files are uploaded to the merchant’s Shopify Files library. Verity application records are stored in a private PostgreSQL database hosted by Supabase, and the application is hosted on Vercel. Resend is used to deliver transactional email. These providers process information only to supply their services to Verity and the merchant.

Information may be processed in countries other than where a merchant or buyer is located. We use service providers and contractual protections appropriate to the information being processed.

Retention and deletion

Secure buyer invitation links expire after 30 days. Verity keeps application records while the merchant uses the service and for only as long as needed to provide the service, meet legal obligations, resolve disputes, and protect the service.

When Shopify sends a valid customer data request, Verity prepares the relevant app data for the merchant within 30 days. Valid customer redaction requests remove matching personal records. After uninstall, Shopify sends a shop-redaction request following its required waiting period; Verity then removes the shop’s application and session records. Videos already stored in Shopify Files remain under the merchant’s control and can be deleted by the merchant in Shopify.

Choices and rights

Buyers can decline an invitation, choose whether their submission may be displayed, and ask the merchant to access or remove personal information or submitted content. Merchants can contact Verity for help fulfilling privacy requests.

Depending on location, individuals may have rights to access, correct, delete, restrict, or object to processing. The merchant is normally the first point of contact for buyer requests because the merchant controls the Shopify store and order relationship.

Security and changes

Verity uses signed, expiring buyer links, authenticated merchant access, private application tables, and other safeguards designed to protect information. No security measure can guarantee absolute protection.

We may update this policy as the service or legal requirements change. The current version and its effective date will remain available on this page.