Privacy Policy

Last updated: 1 August 2026

Ignite AI Reviews ("the app", "we", "us") is a Shopify application installed and operated at the explicit instruction of the merchant who installs it. This policy explains what we access, why, how long we keep it, and how we protect and delete it.

Who controls the data

The merchant is the data controller of their store data. We act as a data processor. We do not sell data, use it for advertising, or use it to train models.

What we access

• No customer personal data. The app reads product content and writes review metafields and image files.
• An offline Admin API access token for each connected store, granted by you through Shopify's standard OAuth consent screen.

How we use it

Product copy is the input to review generation; files hold the generated author images.

How we protect it

• TLS in transit; access tokens encrypted at rest.
• HMAC-verified OAuth callbacks and webhooks.
• Data is transmitted over HTTPS/TLS only.

Data retention & deletion

• The shop domain and an encrypted offline access token, plus a credit ledger and usage log.
• We honour Shopify's mandatory compliance webhooks: customers/data_request, customers/redact and shop/redact. On uninstall and on the shop/redact webhook, which purges the shop's rows.
• Uninstalling the app or contacting us at support@ignitehk.org will remove your stored connection.

Sub-processors

The app runs on Cloudflare (compute, storage and DNS). No other third parties receive your store data.

Sharing

Product text is sent to the configured AI provider (Anthropic, OpenAI or Google) to generate review text and author images. Nothing is sold or used for advertising.

Your rights

You may request access to, correction of, or deletion of your data at any time by emailing support@ignitehk.org. We respond to GDPR and CCPA requests within the timeframes required by law.

Contact

Questions about this policy: support@ignitehk.org.