Rivu by Secret Admirer
Privacy Policy
Effective date: July 28, 2026 · Last updated: July 28, 2026
This Privacy Policy explains how Rivu ("we", "us", "our"), operated by Secret Admirer, collects, uses, and protects personal data when you use the Rivu app on Shopify.
1. Who We Are
Rivu is a Shopify app developed and operated by Secret Admirer. Rivu helps Shopify merchants collect product reviews, display them on their storefronts, and generate user-generated content (UGC) with AI suggestions.
Contact email: support@rivu-one.vercel.app
App URL: https://rivu-one.vercel.app
2. What Data We Collect
When merchants install Rivu and their customers submit reviews, we collect:
- Customer name — displayed alongside the review on the storefront
- Customer email address — used to send review reminder emails (with merchant's permission) and to identify repeat reviewers
- Review content — star rating, review title, review body, photos, and videos submitted by customers
- Product information — product ID and title associated with each review
- Shop information — merchant's Shopify shop domain and access token
We do not collect payment card data, passwords, or any sensitive personal data.
3. How We Use the Data
We use collected data solely to provide the Rivu service:
- Display customer reviews on the merchant's storefront
- Send review request / reminder emails on the merchant's behalf
- Show aggregate rating statistics (average rating, breakdown by stars)
- Generate AI-powered review suggestions in the customer's chosen language
- Award "Top Reviewer" badges to loyal customers
- Generate QR codes that link customers to the review form
We do not sell, rent, or share personal data with third parties for marketing purposes.
4. Data Storage and Security
- Database: All data is stored in Neon PostgreSQL, a SOC 2 Type II certified cloud database. Data is encrypted at rest and in transit.
- Hosting: The Rivu application runs on Vercel, a SOC 2 Type II certified hosting platform. All connections use HTTPS/TLS encryption.
- Backups: Neon automatically backs up data with point-in-time recovery. Backups are encrypted.
- Access: Only authorized Secret Admirer team members can access the production database, using strong passwords and access controls.
5. Data Retention
We retain personal data for as long as the merchant's Rivu account is active. When a merchant uninstalls Rivu:
- Shop access tokens are immediately deleted
- Review data (including customer names and emails) is deleted within 30 days of uninstall
- Merchants may request immediate deletion by emailing us
6. Data Sharing
We share data only with the following sub-processors, solely to operate the service:
We do not share data with any advertising networks or analytics platforms.
7. Merchant Responsibilities
Merchants using Rivu are responsible for:
- Informing their customers that reviews and personal data may be collected via Rivu
- Ensuring they have a lawful basis to collect customer emails for review reminders
- Complying with applicable privacy laws (GDPR, CCPA, etc.) in their jurisdiction
8. Your Rights
Customers whose data is held by Rivu (via a merchant's store) may request:
- Access — a copy of their personal data
- Correction — updating inaccurate data
- Deletion — removal of their data from our systems
- Portability — export of their data in a common format
To exercise these rights, email us at support@rivu-one.vercel.app. We will respond within 30 days.
9. Cookies
The Rivu widget embedded on merchant storefronts does not set any cookies. The Rivu admin dashboard (accessed via Shopify) uses Shopify's session cookies for authentication only.
10. GDPR & CCPA
For merchants serving customers in the EU or California:
- Rivu acts as a data processor on behalf of the merchant (the data controller)
- We process data only on documented instructions from the merchant (by using the app)
- We do not sell personal information as defined by the CCPA
- California residents may exercise rights under CCPA by contacting us directly
11. Changes to This Policy
We may update this Privacy Policy as the app evolves. We will notify merchants of material changes by email or in-app notice at least 14 days before changes take effect. Continued use of Rivu after changes constitutes acceptance of the updated policy.