Nala Reviews is a Shopify app operated by Nala Commerce. It collects a shop's product and store reviews — those left on the shop's own storefront and those the shop already earned on marketplaces and maps — and displays them on the shop's storefront.
We do not sell personal information. We do not use buyer data for advertising or share it with advertising networks. We do not write fake reviews, and we do not publish a review the shop's customers did not leave.
A buyer receives at most one review request per order, sent on the merchant's behalf, with the shop's name as the sender and the shop's address for replies. Every message carries an unsubscribe link; an address that unsubscribes is not contacted again for that shop.
After an email review request is completed or permanently closed, its delivery record (including buyer contact and order details) is deleted after 90 days. Personal-data copies created to answer Shopify customer data-access requests are purged after 30 days. Reviews and their media remain while the merchant uses the service, unless the merchant or customer requests deletion.
Nala Reviews implements Shopify's mandatory privacy webhooks. When Shopify asks us to erase a customer, we delete that customer's reviews, their review media and any pending review requests. When a shop uninstalls the app or asks for erasure, we delete that shop's reviews, media, product mappings, marketplace listings and stored credentials. A merchant can also request erasure directly at the address below.
Data is stored on Cloudflare infrastructure (D1 and R2) and processed by Cloudflare Workers. Review request emails are sent through Cloudflare Email Service.
Reviews from marketplaces and maps are read from the merchant's own seller account through its API, or from pages that are already public. We only read places a merchant has confirmed as theirs.
Questions and erasure requests: support@nalacommerce.com.