Skip to main content

Store Integration

To sync reviews and publish responses, Rewo connects to the official review APIs using secure credentials. In Rewo, we call these integrations Providers.

This guide walks you through setting up the necessary API credentials for:

danger

Enabling a provider will start a full sync for the corresponding store, fetching all available reviews and responses and, depending on your settings, will generate draft responses for reviews without any existing response and schedule these responses for publishing.

Make sure that you have carefully reviewed your projects Response Settings and General Settings, in particular the auto-draft and auto-publish settings.

Apple App Store

Rewo uses the App Store Connect API to fetch reviews and publish your replies. To set this up, you need to generate an API key with the appropriate permissions.

1. Generate an API Key

  1. Log in to App Store Connect.

App Store Connect

  1. Navigate to Users and Access and select the Integrations tab.
  2. Click the Plus (+) icon to create a new API Key.
  3. Provide a name (e.g., "Rewo Integration").
  4. Assign a role. To manage reviews, we recommend the Customer Support or App Manager role.
  5. Click Generate.

Add API Key

2. Collect Credentials

After generating the key, you will need to provide three pieces of information to Rewo:

  • Bundle ID: Found under CFBundleIdentifier in the info.plist of your app or in the App Store Connect URL for your app
  • Issuer ID: Found at the top of the API Keys page.
  • Key ID: Listed next to your newly created key.
  • Private Key (.p8 file): Click the Download API Key link.
warning

You can only download the .p8 file once. Store it securely; if you lose it, you will need to revoke the key and generate a new one.

3. Setup in Rewo

Once you collected these details, enter them under Settings > Providers > Apple App Store in Rewo.

Apple App Store Setup

Google Play Store

Integrating the Google Play Store requires setting up a Service Account in the Google Cloud Console and linking it to your Google Play Console.

1. Enable the Google Play Developer API

  1. Go to the Google Cloud Console.
  2. Select or create the project you want to use.

Google Cloud Console

  1. Search for and enable the Google Play Developer API.

Google Play Developer API

2. Create a Service Account

  1. In the Google Cloud Console, go to IAM & Admin > Service Accounts.
  2. Click Create Service Account.
  3. Give it a name (e.g., "rewo-integration") and click Create and Continue.
  4. In the role selection, you don't need to assign specific Cloud roles here, as permissions will be handled in the Play Console. Mark it as Done.

Service Account

3. Generate a JSON Key

  1. From the list of Service Accounts, click on the one you just created.
  2. Select the Keys tab, click Add Key > Create new key.
  3. Choose JSON and click Create. This will download a .json file.

JSON Key

  1. Log in to the Google Play Console.
  2. Go to Users and permissions > Invite new user.
  3. Under Email address, enter the email of the service account you created.

Invite User

  1. In the Account permissions tab, ensure the following is selected:
    • User feedback -> Reply to reviews.
  2. Click Invite user.

Account Permissions

5. Setup in Rewo

Once you completed these steps, upload the JSON file together with your Android Package Name under Settings > Providers > Google Play Store in Rewo.

Apple App Store Setup

Security & Data Protection

We take your credentials seriously. Here’s how we keep them safe:

  • Encrypted Everywhere: Credentials are encrypted in transit, encrypted at rest (on storage and when the database is offline), and additionally encrypted within the database itself using monthly rotated keys.
  • No Human Access: Decrypted credentials are only ever handled by the system in memory, never accessible to anyone.
  • Internal Use Only: Credentials stay within our infrastructure and are never shared with third parties.
  • Certified & Compliant: We operate on industry-standard certified infrastructure and follow GDPR and security best practices.