Privacy Policy

Starly: Product Reviews & UGC · Last updated October 5, 2026

Starly: Product Reviews & UGC (“Starly”, “we”, “us”) is a Shopify app by Boost Apps that lets merchants collect, moderate and display product reviews and user-generated content, with optional AI summaries, replies and spam detection. This policy explains what data we handle and how.

Store data we access

Starly uses only these Shopify permissions:

• read_products: to list your products and show their title, image and price alongside reviews.
• write_content, write_metaobjects, write_metaobject_definitions: to store your reviews, widget settings and review schema in your own store.
• read_themes: to check whether the Starly app embed and review widget have been added to your published theme. Starly never edits theme files.

Starly does not request access to orders or Shopify’s protected customer data.

Reviews submitted by shoppers

When a shopper submits a review on your storefront, Starly stores the star rating, review title and text, the display name they enter (or “Anonymous”), any photos they attach, and — if they choose to provide it — their email address. The rating, title, text, display name and photos are shown publicly on your product pages, which is the purpose of a reviews app. The email address is not displayed publicly; it is kept only so you can verify or follow up on a review. Shoppers choose what to submit; please ask them not to include sensitive personal information in review text.

Information we store

Reviews, your widget design and settings, and the app’s AI usage counters are stored in your own store as Shopify metafields and metaobjects, so your reviews stay with your store.

Our servers run on Cloudflare. Cloudflare Workers KV holds the store’s Shopify access token and session, your admin language choice and short-lived caches (your plan, store name and currency) that expire within minutes.

Our internal admin service (Boost Apps admin, backed by a Supabase database) keeps a record for each store that installs the app: store domain, store name, store email, shop owner name, primary domain, country, currency, Shopify plan, subscription plan, install/uninstall dates and, while the app is installed, the Shopify access token. We use this record to support you and to send the emails described below.

AI features

When you use an AI feature (summarize a product’s reviews, draft a reply to a review, or flag likely spam), we send the request to OpenRouter, which routes it to an AI model provider. The request contains only the review text and rating needed for that task. We do not send shopper email addresses, order data or any Shopify protected customer data, and we do not use your content to train models.

Storefront behaviour

The Starly widget shows your approved reviews on your product pages and lets shoppers submit new ones. Its script talks only to Starly to load and submit reviews; Starly adds no advertising trackers and sets no advertising cookies on your storefront.

Billing

Collecting and displaying reviews is always included. Paid plans (Starter $9.99, Growth $29 and Scale $79, every 30 days) raise the monthly limits on AI summaries, AI replies and review-request emails, and are billed by Shopify through your Shopify invoice only after you choose a plan. A 7-day free trial applies. We never see or store payment details.

Emails

We send a welcome email when you install the app and a goodbye email when you uninstall it, and optional review-request emails to the addresses you provide. Emails are delivered through Resend and every promotional email contains an unsubscribe link.

Service providers

We do not sell or rent your data. We use these service providers to run the app:

• Cloudflare: app hosting, storage of access tokens/sessions and short-lived caches.
• OpenRouter: AI subprocessor for the AI features described above.
• Supabase: database for the store records described above.
• Tidio: live chat loaded only inside the app’s admin (never on your storefront) so you can reach our support team. So we can help without asking for details first, the chat receives your store’s name, myshopify address, website, contact email, Shopify plan and country, the name, email and role of the staff member using the app, and which app page they are on. It never receives any data about your customers. Messages you send and basic technical data (such as your IP address) are processed by Tidio under their privacy policy.
• Resend: delivery of the emails described above.

Data retention and deletion

When you uninstall Starly, we delete the cached access token and session within minutes. App metafields and metaobjects (including stored reviews) are removed by Shopify with the app. Shopify’s shop/redactrequest, sent 48 hours after an uninstall, removes anything left. If a shopper asks to remove their review or you receive a customers/redact request, email us and we will delete the matching review data.

Your rights

You (or a shopper) can ask us to access, correct or delete the data described above at any time by emailing boostappspro@gmail.com.

Contact

Boost Apps · boostappspro@gmail.com