Privacy Policy

Last updated: October 16, 2026. ReviewLens is operated by Hao Jiang.

Overview

This Privacy Policy explains how ReviewLens collects, uses, stores, and shares information when you use our website, Chrome extension, Shopify integration, payment flow, and AI analysis service.

Information we collect

We collect account identifiers and email addresses provided through Google sign-in and Supabase Auth; Shopify store domains, authorization tokens, granted scopes, product URLs, handles, titles, and descriptions; product reviews collected by the extension; AI analysis results; monthly analysis usage; and technical logs needed to operate, secure, and troubleshoot the service.

How we use information

We use this information to authenticate users, connect authorized Shopify stores, retrieve product information, save the latest collected review data, generate and display AI analysis, enforce subscription and monthly usage limits, process purchases, provide support, prevent abuse, and maintain service reliability.

AI analysis

When you request an analysis, the relevant product title, product description, review ratings, and review text are sent to our third-party AI model provider to generate product issues and improvement suggestions. Do not use ReviewLens with information that you are not authorized to process.

Authentication and local storage

Supabase Auth and Google OAuth are used for account sign-in. The website and extension may use browser storage, authentication sessions, and similar essential technologies to keep you signed in, preserve workflow state, and provide the requested service. ReviewLens does not currently use advertising cookies.

Payments

Payments are processed by Creem. ReviewLens stores checkout and subscription identifiers, plan and payment status, customer identifiers or email returned by Creem, and related webhook records so that paid access can be activated and maintained. Full payment card details are handled by Creem and are not stored on ReviewLens servers.

Service providers

We share only the information needed to provide the service with Supabase for authentication and database infrastructure, Google for sign-in, Shopify for store authorization and product access, Creem for payment processing, our AI model provider for requested analysis, and Vercel for website and API hosting. These providers process information under their own terms and privacy policies.

Data retention

We retain account, Shopify installation, product, latest review snapshot, AI analysis, usage, subscription, payment event, and operational records for as long as needed to provide the service, maintain security, resolve disputes, meet accounting or legal obligations, and enforce agreements. You may contact us to request deletion, subject to records we must retain for legal or legitimate business purposes.

Security

We use reasonable technical and organizational safeguards designed to protect stored information. No online service can guarantee absolute security, and you are responsible for protecting access to your account and authorized Shopify store.

Contact

For privacy questions or data access and deletion requests, contact support@voicefix.org.