Nexprix
Get started

Nexprix · Google Reviews

Privacy policy

Last updated: May 31, 2026

1. Who we are

This policy describes how Ubicuo Libres Pensadores S.L. (hereinafter, "we") processes the information of merchants who install the Google Reviews by Nexprix application (hereinafter, "the App") on their Shopify stores.

Data controller: Ubicuo Libres Pensadores S.L., with address at C/ Pintor Laxeiro 23, 4ºC, 36211 Vigo (Pontevedra, Spain). Contact: hola@ubicuolibrespensadores.com.

2. Data we collect

2.1 From the merchant's Shopify store

  • The *.myshopify.com store domain.
  • Shopify OAuth access tokens (needed for the embedded session and webhooks).
  • Identifiers and email of the user who installs the App, as provided by Shopify.
  • App configuration: Google Place ID, widget preferences.

2.2 From Google

  • Merchant's business profile information: name, average rating, total number of reviews.
  • Public reviews returned by the Google Places API or Google Business Profile API: author name (public), text, rating, publication date.
  • When the merchant connects their Google Business account via OAuth: access and refresh tokens, account and location identifiers.

2.3 From Gemini (Google AI)

We generate an automatic summary from the text of the reviews. To do so we send the review text to Google's Gemini API. That text is already public (the reviewer wrote it on Google Maps). We do not send merchant information nor additional personal identifiers.

2.4 What we do NOT collect

  • No data from end customers who visit the merchant's store.
  • No order, cart or product data.
  • No payment information.
  • No personal identifiers of widget visitors.

3. How we use the data

  • Display the Google reviews on the merchant's storefront via the widget that the App adds to the theme.
  • Generate the AI-powered summary and display it in the widget.
  • Periodically sync the reviews to keep the cache up to date.
  • Operate the subscription billing (managed by Shopify via the Shopify Billing API; we do not process payments directly).
  • Respond to merchant support requests and meet legal obligations.

Legal basis: performance of the service contract that the merchant accepts when installing the App, and consent (revocable at any time by uninstalling the App).

4. Sharing with third parties

We only share data with the providers that make the App work:

  • Google — Places API, Google Business Profile API and Gemini API. Subject to Google's policies.
  • Shopify — for the native integration, OAuth sessions, webhooks and billing.
  • Vercel — App and page hosting (servers in EU/US).
  • Supabase — PostgreSQL database where configuration and review cache are stored (servers in EU or US depending on plan).

We do not sell or transfer information to third parties for commercial purposes.

5. Data retention and deletion

  • While the App is installed: we retain the data necessary to operate it.
  • After uninstall: we keep the data for 48 hours as a grace window (in case you reinstall and want to keep your configuration).
  • After 48 h: we receive Shopify's shop/redact webhook and delete all information associated with the store (sessions, configuration, cached reviews).
  • Manual deletion before 48 h: email us at hola@ubicuolibrespensadores.com and we will do it within 72 hours.

6. Your rights (GDPR)

As a merchant, you can exercise the following rights over the data we process on your behalf:

  • Access to your data.
  • Rectification if inaccurate.
  • Erasure ("right to be forgotten").
  • Restriction of or objection to processing.
  • Data portability.

To exercise them, email us at hola@ubicuolibrespensadores.com. If you consider that we have not properly handled your request, you have the right to file a complaint with the Spanish Data Protection Agency (AEPD).

7. Security

  • End-to-end HTTPS encrypted connections.
  • Encrypted storage at rest in Supabase.
  • Access tokens restricted to the server; never exposed to the end customer's browser.
  • Multi-tenant isolation by store domain.
  • Controlled and logged internal access.

8. Cookies and tracking

The App does not use marketing or tracking cookies. Only strictly necessary cookies are used to maintain the merchant's session inside the Shopify embedded admin (managed by Shopify).

The widget displayed in the merchant's storefront does not install additional cookies on visitors.

9. Changes to this policy

We may update this policy to reflect changes in the App or regulations. When we do, we will update the "Last updated" date at the top. Material changes will be communicated by email to the merchant contact registered with Shopify.

10. Contact

Ubicuo Libres Pensadores S.L.
C/ Pintor Laxeiro 23, 4ºC, 36211 Vigo (Pontevedra, Spain)
hola@ubicuolibrespensadores.com