Privacy Policy

Effective date: 2 October 2026

Trustora is a Shopify app that adds product reviews, review request emails and Instagram and TikTok feeds to Shopify stores. It is operated by Sun Skill Tech (“we”, “us”). This policy explains what data the app processes, why, and the choices available to merchants and their customers.

1. Our role

For data about a store’s customers (for example review authors), the merchant who installed Trustora is the controller and we process that data on the merchant’s behalf, under their instructions. For data about merchants themselves, such as the store’s contact details and billing plan, we are the controller.

2. Data we collect

From merchants, via Shopify

• Store details: myshopify domain, store name, contact email and currency.
• The access token Shopify issues so the app can work with the store, and the store’s billing plan.
• Product details (ID, title, handle, image and price) for products the merchant tags in reviews or posts.
• App settings and widget configuration.

From store customers

• Reviews: name, email address (when the store requires it), star rating, review title and text, and any photos or videos the customer uploads. Uploaded files are stored in the merchant’s own Shopify Files; we keep only their links.
• Verified buyer badge: we check the store’s orders to confirm the reviewer bought the product and store the related order ID.
• Review request emails (only if the merchant turns them on): the customer’s name and email, order number and purchased products, used to send one email asking for a review.
• Storefront usage counts: anonymous events such as widget views, post and product clicks and add-to-cart clicks, used to show the merchant analytics. These events do not include names, email addresses, IP addresses or cookies, and are not linked to individual shoppers.

From Instagram and TikTok (only if a merchant connects an account)

• The account’s ID, username and profile picture, and access tokens that let the app read its posts.
• The account’s public posts and videos: media links, thumbnails, captions, permalinks and post dates.

We only request read access to the merchant’s own account. We never post, comment or send messages on the merchant’s behalf.

3. How we use data

• To provide the app: display reviews, feeds and widgets on the merchant’s store.
• To send review request emails the merchant has enabled.
• To show the merchant analytics about their widgets.
• To manage billing through Shopify, provide support, and keep the service secure and working.

We do not sell personal data, use it for advertising, or share it with third parties for their own marketing.

4. Who we share data with

• Shopify, to run the app, store review media in the merchant’s Files and process billing.
• Meta (Instagram) and TikTok, only when a merchant connects an account, to sign in and fetch that account’s posts.
• Service providers that host our servers and database and deliver email. They process data only to provide their service to us.
• Authorities, when required by law.

Published reviews and connected social posts are shown publicly on the merchant’s storefront; that is the purpose of the app.

5. Retention and deletion

• Uninstalling: when a merchant uninstalls Trustora, we stop all processing and cancel scheduled emails. About 48 hours later Shopify sends us a deletion request and we delete all of the store’s data, including reviews, connected accounts, posts, widgets and analytics.
• Disconnecting Instagram or TikTok: immediately deletes the stored account, its access tokens and all its posts.
• Customer requests: when Shopify forwards a customer’s erasure request, we remove their name and email from their reviews (the review is kept as “Anonymous”) and delete any review request emails for them.
• Merchants can delete individual reviews at any time in the app, and can export a customer’s reviews to answer an access request.

6. Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal data, or to object to or restrict its use (for example under the GDPR, UK GDPR or CCPA). Customers of a store should contact that store first, since the merchant controls their data. You can also contact us at hello@sunskilltech.com and we will help or pass your request to the right merchant. You may also complain to your local data protection authority.

To delete data received from Instagram or TikTok, a merchant can disconnect the account in the app, remove Trustora from the account’s connected apps in Instagram or TikTok settings, or email us.

7. Security

Data is sent over encrypted HTTPS connections. Access to our servers and database is restricted to the people who operate the service, and every request from Shopify is authenticated. No method of storage or transfer is completely secure, but we work to protect data and will notify affected merchants of a breach as required by law.

8. International transfers

Our service providers may process data in countries other than your own. Where required, we rely on appropriate safeguards such as standard contractual clauses.

9. Children

Trustora is a business tool and is not directed at children under 16.

10. Changes

We may update this policy. We will change the effective date above and, for significant changes, notify merchants in the app or by email.

11. Contact

Sun Skill Tech, Pakistan. Email: hello@sunskilltech.com