Skip to content
ReviewTrix

Trust

Security

Last updated: August 6, 2026

ReviewTrix is an embedded Shopify app. Merchants authenticate through Shopify OAuth and session tokens — we do not invent a separate password system for store access.

Transport and hosting

Production traffic is served over HTTPS at reviewtrix.algorithmtrix.com. Application data lives in managed PostgreSQL; review media may be stored in object storage (for example AWS S3) under shop-scoped keys.

Access control

  • Admin routes require a verified Shopify Admin session
  • Storefront APIs use the Shopify app proxy (HMAC-verified) or public API tokens you generate
  • Integration credentials (Klaviyo, Gorgias) are encrypted at rest
  • Plan allowances are enforced server-side

Privacy and GDPR-oriented compliance

We respond to Shopify’s mandatory compliance webhooks, including customer data requests, customer redaction, and shop redaction after uninstall. Details are in our Privacy Policy.

Logging

Operational logs use shop domain and resource IDs. We avoid logging review bodies, customer emails, access tokens, or import CSV contents.

Contact

Security or privacy questions: support.reviewtrix@algorithmtrix.com