Privacy Policy for AI SEO Shopify Integration

When a merchant installs or connects the AI SEO Shopify integration, Shopify may provide us with access to limited store information required for the integration to work.

The app requests the following Shopify API permissions:

These permissions are used to read available Shopify content/blog resources and publish or update blog/article content in the merchant's Shopify store.

We do not request access to Shopify orders, products, customers, payments, shipping data, or inventory unless this changes in a future version of the app.

To operate the Shopify integration, we may store:

• Shopify store domain
• Shopify connection status
• Shopify blog ID selected for publishing
• Shopify API scopes granted to the app
• Encrypted Shopify access token
• Technical logs related to installation, publishing, and compliance webhook handling

The Shopify access token is encrypted at rest and is used only to perform authorized actions for the connected store.

We use Shopify data only to:

• • Connect a merchant's Shopify store to AI SEO
• • Verify authorized access through Shopify OAuth
• • Publish AI SEO-generated articles to the merchant's Shopify blog
• • Store the selected blog destination for publishing
• • Maintain security, audit, and compliance logs
• • Disable or remove the Shopify connection when required

We do not sell Shopify merchant or customer data.

If a merchant uninstalls the app or Shopify sends a shop redaction request, we deactivate the Shopify connection for that store and remove the encrypted Shopify access token and related Shopify connection details.

This includes removing or clearing:

• Encrypted Shopify access token
• Shopify blog ID
• Shopify granted scopes
• Shopify token status
• Shopify enabled status

We may retain limited technical logs where required for security, audit, fraud prevention, or legal compliance.

The app supports Shopify's mandatory compliance webhooks:

Webhook requests are verified using Shopify HMAC validation before they are processed.

We use reasonable technical and organizational measures to protect data connected to the Shopify integration. Access tokens are encrypted at rest. Webhook requests are verified using HMAC signatures. Access to stored data is restricted to authorized systems and personnel.

Third-party services

The Shopify integration is part of the AI SEO platform. Data may be processed by infrastructure, hosting, database, monitoring, and security providers used to operate the AI SEO platform.

These providers are used only as necessary to deliver and secure the service.

Merchant responsibilities

Merchants are responsible for ensuring that the content they publish through AI SEO complies with applicable laws, Shopify's policies, and their own privacy obligations.