Privacy policy
Last updated: 16 August 2026
This policy explains how the Shopify app Vinted Reviews (“the App”), operated by Fuznet (“we”), handles data when a merchant installs it on their Shopify store.
1. Data we collect
Store data. When you install the App, Shopify provides us with your shop domain, shop ID and an access token. We store this to authenticate your store and serve your widget.
App settings. The Vinted seller URL you enter, along with your display preferences (badge position, accent colour, number of reviews, filtering options).
Public Vinted content. Publicly visible information from the Vinted seller profile you provide: seller name, avatar, rating, review counts, review text, review dates and the public username of the review author.
Billing status. Subscription state returned by Shopify’s Billing API. We never see or store payment card details.
We do not collect, request or store your customers’ personal data, and we do not use cookies for tracking or advertising.
2. How we use data
Data is used solely to operate the App: authenticating your store, importing and refreshing your Vinted reviews, rendering the trust badge and reviews carousel on your storefront, managing your subscription, and providing support.
3. Storefront widget
The badge and carousel are served through a Shopify app proxy on your own domain. The widget requests only the reviews associated with your store and does not profile, fingerprint or track your visitors.
4. Sharing and subprocessors
We do not sell or rent data. We use a small number of infrastructure providers strictly to run the service: Shopify (app platform and billing), Lovable Cloud / Supabase (application hosting and database, hosted in the EU), and Vinted’s public website, from which review content is retrieved.
5. Retention and deletion
Data is retained while the App is installed. When you uninstall, Shopify sends us anapp/uninstalledwebhook and we delete your store record, access token, settings and imported reviews within 48 hours. We also honour Shopify’s mandatory GDPR webhooks (customer data request, customer redact, shop redact).
You can request deletion at any time by emailing contact@fuznet.com.
6. Security
Data is transmitted over HTTPS and stored in an access-controlled database. Access tokens are stored server-side only and never exposed to the browser. Admin requests are authenticated with Shopify session tokens.
7. Your rights
Under the GDPR and similar laws you may request access to, correction of, or deletion of the data we hold about you or your store, and you may object to processing. Contact us at contact@fuznet.com and we will reply within 30 days.
8. Relationship with Vinted
Vinted Reviews is an independent application and is not affiliated with, endorsed by or sponsored by Vinted. Only publicly accessible profile and review information is used.
9. Changes
We may update this policy; the “last updated” date above will change. Material changes will be communicated to installed merchants by email or in the app.
10. Contact
Fuznet — contact@fuznet.com