Proven Seller: Reviews: Privacy Policy

Last updated: September 24, 2026

Proven Seller: Reviews ("the App") is provided by City Music LLC, Leominster, Massachusetts, USA ("we", "us"). It shows a merchant's public eBay seller feedback and Reverb shop reviews on the merchant's Shopify storefront. This policy explains what the App collects, why, how long we keep it, and how to have it deleted.

1. Who this policy covers

Merchants: Shopify store owners who install the App.
Shoppers: visitors to a merchant's storefront where the widget is shown.
Marketplace buyers: people who left feedback on eBay or Reverb that the App displays.

2. What we collect and store

From Shopify, about the merchant's store

Data	Why	Kept
Store domain (`*.myshopify.com`)	Identify the installation	Until `shop/redact` (48 hours after uninstall)
Shopify access and refresh tokens, encrypted	Read the store's plan status from Shopify	Deleted at uninstall
Plan status (active, trial end date, test flag)	Turn paid features on or off	Until `shop/redact`
Widget settings (layout, colours, headings)	Render the widget	Until `shop/redact`

The App requests no Shopify access scopes. It never reads orders, products, customers or any shopper personal data from Shopify.

Entered by the merchant

Data	Why	Kept
Public eBay username	Read that seller's public feedback	Until disconnected, uninstall + `shop/redact`, or an eBay account-deletion notice
Public Reverb shop name (slug)	Read that shop's public reviews	Until disconnected or `shop/redact`

We do not ask for, and never store, eBay or Reverb passwords or login tokens.

From eBay and Reverb (public data)

Data	Why	Kept
Review text, rating, approximate date, item title	Display on the merchant's storefront	At most the latest 100 per marketplace per store; refreshed about every 12 hours
Reviewer name, masked (eBay "j***n"; Reverb "First L.")	Attribute the review without identifying the person	Same as above
Aggregate rating (positive %, star rating, count)	Display	Same as above

Reviewer names are masked before they are stored; we never store a buyer's full eBay user ID or full name. eBay already masks buyer names in the data it gives us. Reviews that eBay no longer returns are deleted at the next refresh; eBay content not refreshed within 48 hours is deleted.

From shoppers

The storefront widget makes one request, through Shopify's app proxy, to fetch the merchant's reviews. Shopify forwards the store domain and, if a shopper is logged in, a customer ID; the App does not store either, sets no cookies, and uses no analytics or tracking. Our hosting provider's server logs may record IP addresses; these logs are kept for no more than 30 days and are used only for security and troubleshooting.

3. How we use data

Only to provide the App: fetching and displaying reviews, and checking whether a store's plan is active. We do not sell data, use it for advertising, or share it except with the processors below.

4. Processors and third parties

Shopify: hosting platform and billing.
Railway (Railway Corp.): application hosting and database, United States.
eBay and Reverb: the sources of the public review data. This application uses the Reverb API but is not endorsed, created by or certified by Reverb.com, LLC.

5. Deletion and your rights

Merchants: uninstalling deletes the Shopify access token immediately; Shopify's shop/redact request (48 hours later) deletes everything else. Disconnecting eBay or Reverb in the App deletes that marketplace's stored reviews at once.
Shoppers: the App holds no shopper data, so Shopify customers/data_request and customers/redact requests have nothing to return or erase; we acknowledge them.
eBay users: we honour eBay Marketplace Account Deletion notifications: a deleted eBay seller account's connection and stored feedback are removed.
Marketplace buyers who want a review removed from a storefront can ask the merchant, or contact us at stephentrines@gmail.com; masked names mean we may need the review text to find it.

Depending on where you live (for example the EU/UK under GDPR, or California under the CCPA/CPRA), you may have rights to access, correct or delete personal data. Contact stephentrines@gmail.com.

6. Security

Access tokens are encrypted at rest. Every request from Shopify is signature-verified (OAuth HMAC, webhook HMAC, app-proxy signature, admin session tokens). Connections use HTTPS.

7. Children

The App is not directed to children under 16 and does not knowingly collect their data.

8. Changes

We will post changes here and update the date above. Material changes will be posted at least 14 days before they take effect.

9. Contact

City Music LLC, 31 Sack Blvd., Leominster, MA 01453, USA. stephentrines@gmail.com