1. Who we are

This policy covers the Testimonials Wall & Slider app (“the app”) for Wix websites. The apps are made and operated by Dmytro Bieliaiev, an independent developer based in Serbia (“we”, “us”), and are distributed through the Wix App Market. Privacy questions and requests: bieliaiev.d@gmail.com.

2. Who this policy is for, and our role

The policy explains what information the app handles, why, where it is kept and what choices you have. It concerns two groups of people:

  • Site owners — Wix users who install the app on their site (including people the owner lets manage the site). For information about you as our customer — your installation, plan and the messages you send us — we decide how it is used and act as an independent controller. Wix is a separate controller for your Wix account.
  • Site visitors — people who visit a site where the app is installed. Whatever the app handles about visitors, it handles on behalf of the site owner and only as the owner’s settings say. The site owner is the controller of that information and we act as their processor. If the app collects visitors’ information on your site (section 3 says whether it does), mention it in your own site’s privacy policy. Visitors who have questions about their data should contact the site owner first; we help site owners answer such requests.

3. Information the app processes

Testimonials added by the site owner: customer name, role, company, text, rating, date, source and link, photo link and tags, typed in or imported by the site owner. The site owner is responsible for having each customer’s permission to publish them.

Wall settings: layout, theme, colours, filters, texts and collect-form options.

Testimonials sent by visitors (only if the site owner turns on the collect form): the name, the text and, if the site owner asks for them, a star rating, a role or company and an email address. A submission is shown on the site only after the site owner approves it. The email address is never shown on the site; only the site owner sees it in the dashboard. The site owner is notified of new submissions through Wix notifications.

Spam protection: to limit how many testimonials one network can send per day, the app stores a keyed one-way hash of the sender’s network address, the wall and the date, made with a secret key that exists only on the app’s server. The address itself is not stored; the hash cannot be recomputed without the key or linked across days or walls. Submissions made before 31 October 2026 carry the earlier unkeyed hash.

4. Cookies and browser storage

The app does not set any cookies. In the visitor’s browser it uses sessionStorage to keep a copy of the wall’s published testimonials for faster loading; it is cleared when the tab is closed. In the site owner’s dashboard, localStorage remembers whether the sample content was already added and whether a short review request was already shown.

5. Third-party services

The app uses no analytics, tracking or advertising services of its own. From visitors’ browsers it loads only the photos the site owner chose (normally from Wix media); a review link opens only when a visitor clicks it.

6. How long data is kept, and how to delete it

Testimonials, submissions and walls stay in the site’s Wix collections until the site owner deletes them in the app dashboard or in the site’s CMS. Removing a wall or the widget does not delete testimonials.

7. Information we receive about site owners

When you install, use or pay for an app, Wix makes the following available to us in our developer account: your site’s address and internal site and app-installation IDs, whether the app is installed, the plan you chose, its billing period, trial and subscription status and dates, and the editor your site uses. Payments are processed by Wix; we never receive card or bank details. If you write to us, we receive your email address and what you write. Reviews you publish on the App Market are public under Wix’s terms. The app itself reads your site’s plan from Wix to decide which features are available.

  • To provide the app and the features of your plan, and to answer your support requests — performance of our contract with you (GDPR Art. 6(1)(b)).
  • To keep the app working and safe — to prevent abuse (for example the spam limits described in section 3), fix errors and decide what to improve — our legitimate interests (Art. 6(1)(f)). For this we look at installation-level figures (installs, plans), not at profiles of individual people.
  • To keep records required by tax and accounting law — legal obligation (Art. 6(1)(c)).

Information about visitors is processed only to run the features the site owner turned on, on the site owner’s instructions; the site owner decides the legal basis for it.

We do not sell personal information, do not share it for cross-context behavioural advertising, do not build advertising profiles and do not use visitors’ information for our own purposes. We make no decisions with legal or similarly significant effect based solely on automated processing.

9. Where information is stored and who processes it

The apps run on Wix’s app hosting and keep their data in the site’s own Wix collections and settings. We do not run servers or databases of our own for the apps and do not copy site data out of Wix. Service providers involved:

  • Wix.com — app hosting, database, email and notification delivery, payments (Wix Privacy Policy).
  • Google (Gmail) — our support mailbox, for the messages you send us.
  • Any other service only where section 5 names it.

Wix and its providers may process data outside your country, including in the United States, under the safeguards described in Wix’s policy. We access the information in section 7 from Serbia through Wix’s developer dashboard.

10. How long information is kept

Information an app stores on a site (section 3) stays in that site’s Wix collections or settings until the site owner deletes it — section 6 explains how. Uninstalling an app may leave its collections in the site’s CMS; the site owner can delete them there. Installation and billing information stays in our Wix developer account as long as Wix provides it; payment records are kept as long as tax law requires. Support emails are kept as long as needed to handle your request and its follow-up.

11. Security

All traffic is encrypted (HTTPS). Owner-only actions are checked against the Wix login of the site’s owner or its collaborators. Where an app has to recognise repeat submissions, it stores one-way hashes made with a server-side secret key, never network addresses. Each feature collects only what it needs. If we learn of a security incident affecting your data, we inform Wix and the affected site owners without undue delay.

12. Your rights and choices

Depending on where you live — for example under the EU or UK GDPR, the Serbian Law on Personal Data Protection, or US state laws such as the CCPA — you may have the right to access, correct or delete your personal information, to receive a copy of it, to restrict or object to its processing and to withdraw consent.

  • Site owners: delete the app’s content at any time in the app’s dashboard (section 6), uninstall the app, or email us to exercise any right.
  • Site visitors: contact the owner of the site you visited — they control the information, and we help them.

We answer within 30 days and may need to confirm your identity first. Exercising a right never changes how we treat you. You can also complain to your local data-protection authority; in Serbia this is the Commissioner for Information of Public Importance and Personal Data Protection (poverenik.rs).

13. Children

The apps are made for businesses and site owners and are not directed at children. We do not knowingly collect children’s personal information. Owners of sites aimed at children are responsible for any consent their visitors’ parents must give.

14. Changes to this policy

When the way an app handles information changes, we update this page, its “Last updated” date and the change history below. If a change materially affects how personal information is used, we publish it here at least 14 days before it takes effect and also show a notice in the app’s dashboard.

15. Contact

Dmytro Bieliaiev, Serbia — bieliaiev.d@gmail.com

Change history

  • 31 October 2026 — the spam-limit hash is now made with a server-side secret key; before, it was an unkeyed hash of the network address, the wall and the date, which could be matched by trying every possible address.
  • 31 October 2026 — rewritten in the common format used for all our apps (roles, legal bases, rights, retention and how changes are announced).