Who We Are
EscapeFlow Reviews is a Shopify app that helps merchants migrate and manage product reviews, operated by BuiltCo.
Contact: support@escapeflow.app
Data We Collect
- Shop information: Shop domain, shop owner email
- Review data: Review content, star ratings, reviewer names, review dates, review photos and videos
- Customer contact data: Customer name and email address from orders, used solely to send review request emails on the merchant's behalf
- Order data: Order IDs used to verify Verified Purchase status
- Billing data: Subscription status (managed by Shopify)
We do not collect customer payment information or passwords.
Why We Collect This Data
- To migrate your existing reviews from Loox to EscapeFlow
- To display reviews on your storefront
- To send review request emails to your customers
- To manage your subscription and billing
How We Store Your Data
- Database: Supabase (PostgreSQL), hosted on AWS ap-northeast-2 Seoul
- File storage: Shopify Files
- Queue processing: Upstash Redis
All data is encrypted at rest and in transit.
Data Retention — Three-Tier Policy
| Tier | Condition | Retention Period |
|---|---|---|
| L1 Trial | Uninstalled during free trial | 30 days after uninstall |
| L2 Paid | Uninstalled after paying | 180 days after uninstall |
| L3 Permanent | One-time $199 archival fee | Permanent |
Before deletion, we send reminder emails:
- L1: 1 reminder at Day 25
- L2: 3 reminders at Day 150, 170, 179
When a merchant uninstalls EscapeFlow, we retain commercial data to fulfil our data custody contract with paid users, enabling account recovery upon reinstallation.
- Trial merchants: Data permanently deleted 30 days after uninstall, or immediately upon erasure request.
- Paid merchants: Data retained for up to 180 days after uninstall.
- Lifetime storage merchants ($199 one-time): Data retained permanently as per contract.
This retention period satisfies the "legally required to retain" exception under Shopify's privacy compliance framework, as we maintain an ongoing data custody contract with paying merchants.
Data Sharing
We do not sell your data. Subprocessors:
- Supabase: Database hosting, AWS ap-northeast-2
- Upstash: Queue processing, AWS
- Resend: Transactional email, US
- Shopify: Billing and storefront, Global
Your Rights
- Access: Request a copy of all data we hold
- Delete: Request immediate deletion at any time
- Export: Export your reviews free of charge, anytime
- Correct: Request correction of inaccurate data
Contact support@escapeflow.app — we respond within 30 days.
Customer Data
Your customers' review data is processed on your behalf. You are the data controller; we are the data processor.
Cookies and Tracking
EscapeFlow does not use cookies or tracking technologies. Our review widget does not track customer browsing behavior.
Changes
We will notify you by email of material changes to this policy.