Effective date: February 5, 2026
Company: Spikecom Group FZCO (“Vouch”, “we”, “us”, “our”)
Location: Dubai, United Arab Emirates
Contact: [email protected]
This Privacy Policy explains how Vouch collects, uses, discloses, and retains information when (a) a merchant installs or uses the Vouch Shopify app (“Merchants”), and (b) a Merchant’s customers or store visitors submit or view reviews through Vouch (“Reviewers” and “Store Visitors”). The app, embedded widgets, email features, and related services are the “Service”.
By installing, accessing, or using the Service (including by submitting a review), you acknowledge that information may be processed as described in this Policy.1) Roles (Merchant vs. Vouch)
Merchant information: We generally act as an independent controller for information about Merchants (e.g., account/admin contact details and communications).
Reviewer/customer information: When we process a Merchant’s customer data (e.g., review submissions, review-request emails, purchase association), we generally act as a processor/service provider on behalf of the Merchant, and the Merchant is the controller/business.
If you are a Reviewer/Store Visitor, privacy requests about your review or related customer data are typically handled by the Merchant (see Section 11).2) Information we collect
We collect the following categories of information depending on how the Merchant uses the Service.
A) Merchant and store information (from Shopify and the Merchant)
When a Merchant installs and uses Vouch, we may receive store and account information necessary to operate the Service, such as:
store name, store domain, store identifiers
Merchant contact details associated with the Shopify account (e.g., email)
app settings and configuration data
product-related information needed to display review widgets and operate app features
Vouch uses Shopify app permissions/scopes including:
writeproducts, readproducts, writeappproxy, write_metaobjects
B) Review and review-related information (Reviewers / Store Visitors)
We may process:
review content (rating, text, title)
reviewer name (may be shown publicly or displayed as anonymous depending on Merchant settings)
reviewer email (typically not displayed publicly)
purchase/order and product association information (for authenticity/verification and/or review workflows)
uploaded media (such as photos; video may be supported in the future)
C) AI-generated insights and derived data
We may generate or store derived data based on reviews and media, such as:
sentiment, summaries, tags, topics, language detection
spam/fraud/abuse indicators
content classification (e.g., whether an image appears relevant or inappropriate)
These insights may be produced automatically and may be inaccurate.
D) Email delivery and communications
We may process:
review request emails (sent on the Merchant’s behalf when enabled)
support requests and messages
service communications (e.g., updates, security notices, operational messages)
E) Technical, device, and usage information
We may collect or receive technical information such as:
device/browser type and settings
IP address and approximate location derived from IP
app and storefront widget usage events
logs and diagnostic data (e.g., error and performance logs)
F) Affiliate / referral program information (if offered)
If we offer affiliate/referral programs, we may collect information to track referrals and attribute sign-ups (e.g., referral identifiers, link clicks, conversion events).3) How we use information
We use information to:
Provide and operate the Service
authenticate and connect Vouch to a Merchant’s Shopify store
display product reviews and store reviews on storefront pages
send review request emails (where enabled)
store and apply app settings and widget configuration
AI and automated analysis
analyze review text and uploaded media to generate insights (e.g., summaries, tags, sentiment)
assist with moderation, fraud/spam detection, and quality checks
help Merchants understand review trends and performance
Security, fraud prevention, and abuse control
detect and prevent spam, fake reviews, fraud, or misuse
protect the Service, Merchants, and Store Visitors
Support and communications
respond to inquiries and provide technical support
send service-related notices and required communications
Improve and maintain the Service
debug issues, monitor performance, and improve features
analyze usage trends (including through analytics tools, where enabled)
Marketing and growth (where permitted)
communicate about Vouch and other products/services
operate promotions, affiliate/referral programs, and related measurement
Where required by applicable law, we will provide appropriate choices/consents for certain marketing or tracking activities.4) Review submission consent and user responsibilities
By submitting a review or uploading media through the Service, you:
consent to the collection, use, processing, and disclosure of your information as described in this Policy (including for display on a Merchant’s storefront, and for AI/automated analysis where used);
acknowledge that reviews are intended to be public (subject to Merchant settings and moderation), and that you control what you choose to include in your review;
represent and warrant that you have the legal right to submit the content you provide (including photos), and that your content does not violate applicable law or third-party rights;
agree not to include sensitive personal information (e.g., government IDs, financial details, medical data) or personal information of other individuals unless you have their permission and a legal basis to share it.
Merchants control whether a review is published, displayed as anonymous, edited, or removed. If you want a review removed or changed, you must contact the Merchant (see Section 11).5) Public reviews and Merchant control
Reviews are intended to be displayed on a Merchant’s storefront. Depending on Merchant settings:
the reviewer’s name may be displayed or the review may appear as anonymous
the reviewer’s email is typically not displayed publicly by Vouch
Merchants control moderation, publication, removal, and display settings for reviews in accordance with applicable consumer protection laws.6) Third-party AI providers and “no control” clarification
To provide certain features, Vouch may use third-party AI service providers (for example, OpenAI, DeepSeek, and other similar providers) to process review text and/or uploaded media.
When these features are used:
review content and/or media may be transmitted to such providers for processing;
those providers may process the data according to their own terms, documentation, and policies;
we do not control the internal operation of third-party AI models and systems, and AI outputs may be inaccurate, incomplete, or inappropriate.
To the maximum extent permitted by applicable law, Vouch is not responsible or liable for the acts, omissions, or independent practices of third-party AI providers. However, Vouch may select and use providers to operate the Service, and may change providers over time.7) Cookies, pixels, and similar technologies
Vouch operates within Shopify and may load scripts/widgets on storefronts. We may use cookies or similar technologies for:
Strictly necessary purposes (e.g., security, functionality, session integrity)
Analytics/advertising measurement (e.g., pixels or analytics SDKs), which may be enabled now or in the future depending on configuration and legal requirements
Tools that may be used include Google Analytics and Meta Pixel, and other providers may be added over time. These tools may collect device data, cookie identifiers, and usage events.
Merchant responsibility: If non-essential cookies/tags are used on a Merchant storefront, the Merchant may be responsible for obtaining end-user consent and providing required cookie notices under applicable law.8) How we disclose information
We do not disclose personal information except as described below:
A) Service providers (sub-processors)
We may share information with vendors that help us operate the Service, such as:
infrastructure and database hosting providers (e.g., DigitalOcean)
content delivery/media hosting providers (e.g., Cloudflare for images)
email delivery providers
analytics, logging, security, and AI providers (where enabled)
These providers are permitted to process information only to provide services to us.
B) Legal, safety, and enforcement
We may disclose information if we believe it is reasonably necessary to:
comply with law, regulation, legal process, or lawful requests
protect rights, safety, and security of Vouch, Merchants, Reviewers, or the public
prevent, investigate, or address fraud, abuse, or security issues
C) Business transactions
If we are involved in a merger, acquisition, restructuring, financing, bankruptcy, or sale of assets, information may be disclosed or transferred as part of that transaction.
D) Marketing-related disclosures / “sale” or “sharing” (where legally defined and only as permitted)
We may use or disclose information for marketing, promotional, affiliate/referral, or measurement purposes as permitted by applicable law. Where required, we will provide notices and the ability to opt out or manage preferences.9) International data transfers
We operate from the United Arab Emirates and may process or store information in other countries where we or our service providers operate. Where required by law, we will implement appropriate safeguards for cross-border transfers.10) Marketing preferences
You can opt out of marketing communications by:
using an unsubscribe link (if provided), or
emailing [email protected] with the subject: “Opt out of marketing”
Service/transactional messages (e.g., security or operational notices) may still be sent when necessary to provide the Service.11) Data retention
We retain information for as long as reasonably necessary to:
provide and maintain the Service
support reinstalls and account continuity
comply with legal obligations
resolve disputes, enforce agreements, and protect against fraud/abuse
maintain security and operational integrity
improve and develop the Service
When a Merchant uninstalls the app, we stop collecting new data via Shopify integrations associated with that installation, but we may retain certain information consistent with the purposes above. Merchants may contact us regarding deletion requests, and we will handle requests in accordance with applicable law and our obligations.12) Your rights and requests
Rights vary depending on your location.
Reviewers / Store Visitors
If your information was collected through a Merchant’s store (for example, by submitting a review), the Merchant is typically the controller. Requests to access, delete, correct, or remove review content should be directed to the Merchant. We may assist the Merchant as their processor/service provider.
Merchants
Merchants may request access, correction, or deletion of certain account/contact information we process as controller by contacting [email protected].
EU/UK and California
If you are in the EU/UK (GDPR/UK GDPR) or California (CCPA/CPRA), you may have additional rights such as access, deletion, correction, portability, restriction, objection, and opt-out rights (including opt-out of certain disclosures defined as “sale” or “sharing” under some laws).
To submit a request, email [email protected] with the subject: “Privacy Request” (or “California Privacy Request” if applicable). We may need to verify your identity.13) Security
We implement reasonable administrative, technical, and organizational measures designed to protect information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.14) Children
The Service is not intended for individuals under 18, and we do not knowingly collect personal information from children.15) Changes to this Policy
We may update this Policy from time to time. The effective date will be updated when changes are posted. If changes are material, we may provide additional notice where appropriate.16) Contact
For questions, requests, or concerns:
[email protected]