Legal

Privacy Policy

Last updated 2026-10-15

This policy explains what ShopAEO ("we", "us") collects on shopaeo.ai and in the ShopAEO app, which works with Shopify, why we collect it, and what you can do about it. ShopAEO is run by its founders in New York, NY, USA. Our company details will be listed here once it is registered. If anything here is unclear, email [email protected].

On this website

• Beta and report sign-ups. Your email address, your store's web address, whether you ticked the box for product news, the date, and the country your request came from. We use these to contact you about the beta or send the report you asked for. We only send product news if you ticked the box and then confirmed by clicking a link in one confirmation email. Every news email has an unsubscribe link.
• AI answer reports. To build a report you asked for, we send your store's web address and shopping questions about your product category to AI assistants (such as ChatGPT, Perplexity and Google) through our data provider, DataForSEO. We don't send your email address.
• The free checker. We read the public pages of the store address you enter (its homepage, robots.txt, llms.txt, public product list, and up to six product pages and their product data files), the same way any visitor or search engine can. We keep the result for one day so repeat checks are fast. We don't ask for a login.
• Abuse protection. We use your IP address to limit how many checks and sign-ups one connection can make. These counters delete themselves after about a day, and we don't store your IP address with your sign-up.
• Cookies and analytics. This site sets no cookies, and its fonts are served from our own site. If we turn on visit counting, we use Cloudflare Web Analytics, which counts visits without cookies and without tracking you across sites.

In the ShopAEO app

When a store installs ShopAEO, Shopify gives us access to the parts of the store the app needs. We use it to find problems, write suggested fixes and, only after you approve them, make the changes.

• Store content. Products, collections, pages, blog posts, images, image descriptions, redirects, theme settings (read only) and store policies.
• No customer or order data. The app doesn't request access to your customers' personal information or your orders.
• Your team. The names and emails of staff who use the app, so we can show who approved each change.
• AI drafting. To write suggested fixes and content ideas, we send the relevant product or page content, and, if you connected Google, the search queries and page traffic related to it, to AI models we reach through Amazon Bedrock or OpenRouter. We only use model providers that process it for us and don't use it to train their models.

Google data

Connecting Google is optional. If you connect, we ask for read-only access to Google Search Console (clicks, impressions and search queries for your site's pages) and Google Analytics (landing page visits and revenue). We use this only to rank fixes by your real traffic, suggest content based on what people search for, and show before and after results inside the app. We never change anything in your Google accounts.

• We don't sell Google data, use it for advertising, or use it to train general AI models.
• We don't let people read it, except with your permission, to investigate a security problem, or when the law requires it.
• We share it only with the providers listed below, only to run these features for you.
• We store your Google connection tokens encrypted. When you disconnect Google in the app, or uninstall, we delete the tokens and the Google data we stored for your store.

ShopAEO's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Who helps us run ShopAEO

We use a small number of service providers, each only for the job listed: Cloudflare (website hosting, analytics and sign-up storage), Amazon Web Services (app hosting and storage, with each store's data kept separate, and AI models through Amazon Bedrock), OpenRouter (sending AI drafting requests to model providers), DataForSEO (search and AI answer data), Shopify (app platform and billing), Google (only if you connect it), an email service (to send the emails you ask for) and our team chat tool (an internal alert when a store signs up, with the store address only, never your email). Our providers may store and process data in the United States and other countries.

We don't sell or share personal information as defined by the California Consumer Privacy Act, and we don't use it for cross-context behavioral advertising.

How long we keep it

• Beta and report sign-ups: until the beta ends, when we delete them, or sooner if you ask.
• Product news consent: until you unsubscribe.
• Checker results: one day.
• App data: while the app is installed. We respond to Shopify's privacy requests. Shopify sends a store deletion request 48 hours after a store uninstalls, and we then delete that store's data. Because the app doesn't hold customer data, we answer customer data requests by confirming we have none.

Your choices and rights

You can ask us to show, correct or delete what we hold about you, or to stop emailing you, by writing to [email protected]. Depending on where you live (for example the EU, the UK or California) you may have further rights, and we honor these requests for everyone. We reply within 30 days.

Security

Data is encrypted in transit. Connection tokens are encrypted at rest, and access to our systems is limited to the people who run them.

Children

ShopAEO is a business tool and isn't meant for anyone under 16.

Changes

If we change this policy in a way that matters, we'll update the date above and tell app users inside the app.