Privacy Policy — AI Review Summary

Last updated: August 9, 2026

AI Review Summary (“the app”) is a Shopify app that generates AI-written summaries of your product reviews. This page explains what data the app accesses, what it does with that data, and how to have it deleted.

Data we access from your Shopify store

The app reads your product catalog (title and ID) and writes the generated summary back to each product as a metafield (ai_review_summary.summary). If your theme displays this metafield, the summary becomes visible to shoppers on your storefront — that’s the intended purpose. The app does not access customer records, orders, or payment information.

Data we access from Judge.me

Once you connect your Judge.me account (via Judge.me’s own OAuth login, scoped to read_reviews and read_products), the app fetches your product reviews — star rating and review text — to generate summaries. Judge.me’s review API also returns the reviewer’s name and email as part of each review record; the app reads this data in memory for each request but never stores it, logs it, or forwards it anywhere. Only the star rating and review text are sent on for summarization, and only an aggregate summary is ever saved.

How AI summarization works

Review ratings and review text (no reviewer name, email, or other personal information) are sent to Anthropic’s Claude API to generate a summary. This is the only third party review content is shared with. See Anthropic’s privacy policy for how they handle data submitted to their API.

What we store

The app’s database (hosted on Google Cloud) stores: your shop’s domain, an encrypted Judge.me access token so we can keep fetching reviews on your behalf, and the generated summary text for each product. It does not store raw review text, reviewer names, or reviewer emails.

Data retention and deletion

If you uninstall the app, your Shopify session is invalidated immediately. Your shop’s stored data (Judge.me token and generated summaries) is permanently deleted within 48 hours of uninstall, in line with Shopify’s mandatory data-protection requirements. You can also email us at any time to request earlier deletion.

Security

Your Judge.me access token is encrypted at rest. All traffic to and from the app is encrypted in transit (TLS). Scheduled background jobs are authenticated with Google-signed tokens verified by the app before any data is processed.

Your rights

You can request a copy of the data we hold about your shop, or request its deletion, at any time by emailing us. We respond to these requests as required under GDPR and CCPA.

Changes to this policy

If this policy changes, we’ll update the date at the top of this page.

Contact

Questions about this policy or your data: ryttle2025@gmail.com