Review2XML

    Privacy Policy

    Last Updated: October 5, 2026

    1. Introduction

    Welcome to Review2XML ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our CSV to XML conversion service.

    2. Information We Collect

    2.1 Account Information

    When you create an account, we collect:

    • Email address
    • Full name
    • Password (encrypted)

    2.2 Business Information

    During the conversion process, you provide:

    • Business name
    • Website URL
    • Business country

    2.3 CSV File Data

    We process your uploaded CSV files containing product review data (including reviewer names and review text) to generate your XML feed. We retain your most recent CSV, overwritten each time you upload a new one, so we can keep your feed live and unlock all reviews instantly when you upgrade. It is stored privately and is never publicly accessible. It is deleted when you delete your account or uninstall the Shopify app.

    2.4 Payment Information

    Payment processing is handled securely by Stripe. We do not store your full credit card information. We only retain transaction records and subscription status.

    2.5 Usage Data

    We automatically collect:

    • Conversion history (timestamps, file counts)
    • Subscription tier and status
    • Device and browser information
    • IP address and location data

    3. How We Use Your Information

    We use your information to:

    • Provide and maintain our CSV to XML conversion service
    • Process your transactions and manage subscriptions
    • Send you service-related notifications and updates
    • Respond to your inquiries and provide customer support
    • Improve our service and develop new features
    • Detect, prevent, and address technical issues or fraudulent activity
    • Comply with legal obligations

    4. Data Storage and Security

    Your data is securely stored using industry-standard encryption practices. We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

    We retain your most recent uploaded CSV (overwritten on each new upload) along with conversion metadata such as timestamps and status. Stored CSVs are kept in a private location that is never publicly accessible, and the generated feed is served at a unique, unguessable URL. Your stored CSV and feed are deleted when you delete your account or uninstall the Shopify app.

    5. Third-Party Services

    5.1 Stripe

    We use Stripe for payment processing. Stripe's privacy policy governs the collection and use of payment information. Visit https://stripe.com/privacy for more information.

    6. Your Rights

    You have the right to:

    • Access: Request a copy of your personal data
    • Correction: Update or correct inaccurate information
    • Deletion: Request deletion of your account and associated data
    • Export: Download your data in a portable format
    • Opt-out: Unsubscribe from marketing communications
    • Object: Object to certain processing of your data

    To exercise these rights, please contact us at info@review2xml.com or use the data management features in your dashboard.

    7. Data Retention

    We retain your account information and conversion history for as long as your account is active or as needed to provide you services. If you delete your account, we will delete your personal information within 30 days, except where we are required to retain it for legal or regulatory purposes.

    8. Cookies and Analytics

    We use essential cookies to keep you signed in and make the service work. We also use two analytics tools to understand how our website is used and improve it:

    • Google Analytics (Google LLC) measures visits and how people find us, using cookies such as _ga. You can opt out at tools.google.com/dlpage/gaoptout.
    • Microsoft Clarity (Microsoft Corporation) shows us how pages are used through heatmaps and session recordings, using cookies such as _clck and _clsk. Sensitive input fields are masked. See the Microsoft Privacy Statement.

    We don't show ads, we don't use advertising cookies, and we never sell your data or share it with advertisers. You can block or delete cookies in your browser; the site works without analytics cookies.

    If you're in the EU, EEA, UK or Switzerland, we ask for your consent before setting analytics cookies. Wherever you are, you can change your choice at any time: .

    9. Children's Privacy

    Our service is not intended for users under the age of 18. We do not knowingly collect personal information from children.

    10. International Data Transfers

    Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in compliance with applicable data protection laws.

    11. Changes to This Privacy Policy

    We may update this Privacy Policy from time to time. We will notify you of any changes by updating the "Last Updated" date and, for material changes, by sending you an email notification.

    12. Review2XML Shopify App

    When you install our Shopify app, we process data as follows:

    • What we read from Shopify (read-only): your product catalog (vendor, SKU, barcode, variant IDs, product handles) to match reviews to products, plus your store name, URL, country, and contact name for display. We do not access your customers, orders, or any customer personal data.
    • What you provide and we store: the reviews CSV you upload (which contains reviewer names and review text), the product-reviews XML feed we generate from it, your conversion history, and any feature-board or support submissions. Your latest CSV is kept (overwritten on each upload) so we can keep your feed live and unlock all reviews instantly when you upgrade.
    • Where it's stored: our own infrastructure (Supabase and Fly.io, United States), separate from the website. Review CSVs are kept in a private store that is never publicly accessible; the generated feed is served at a unique, unguessable URL for Google Merchant Center.
    • Billing: handled entirely through Shopify's Billing API. We never see or store your payment-card details.
    • Deletion: uninstalling the app deletes your feed, your stored CSV, and all associated data. We honor Shopify's mandatory data-request and data-erasure (GDPR) webhooks; because we store no customer personal data, data requests return nothing.
    • Contact: info@review2xml.com

    13. Google Merchant Center Connection

    Review2XML offers an optional one-click connection to Google Merchant Center so your product reviews can be published to your own Merchant Center account without manually hosting a feed URL. This connection is entirely optional. You can always use a feed URL instead. If you connect it, we process Google data as follows:

    • What we access: when you click "Connect Google Merchant Center", Google asks you to grant the https://www.googleapis.com/auth/content permission. We use it only to list the Merchant Center accounts you already have access to (so you can choose which one to use), to create a product-review data source in the account you select, and to upload your reviews to it.
    • What we do not access: we do not read or modify your products, orders, pricing, customers, or any other Merchant Center data, and we never access any Google account or Merchant Center account other than the one you explicitly select. We do not use this access for advertising, and we do not use it to train machine-learning or AI models.
    • What we store: your Merchant Center account ID, the identifier of the review data source we create, the time of the last sync, and an access/refresh token issued by Google so the connection keeps working without asking you to sign in again. Tokens are stored on our own infrastructure (Supabase, United States) and are never exposed publicly or included in your feed.
    • What we share: nothing. We do not sell, rent, or transfer Google user data to any third party, and we do not use it for any purpose other than delivering the review-sync feature you enabled.
    • How to revoke: you can disconnect at any time under Settings → Google Merchant Center, in the Review2XML dashboard or in our Shopify app, whichever you connected from. Disconnecting revokes our access and deletes the stored tokens. Deleting your Review2XML account, or uninstalling the Shopify app if you connected there, also deletes the connection and its tokens. You can also revoke access directly at Google Account → Third-party apps & services.

    Review2XML's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

    14. Contact Us

    If you have any questions about this Privacy Policy or our data practices, please contact us at:

    Email: info@review2xml.com