Privacy Policy

Last updated: July 20, 2026

This Privacy Policy explains what data AutoRank: SEO Blog & CRO ("the App") collects when a merchant installs it on their Shopify store, and how that data is used, stored, and protected.

1. Information We Collect

• Store information: your shop domain and basic store configuration (theme/blog settings, connected schedule preferences).
• AI provider API keys (optional, "bring your own key"): if you connect your own OpenAI, Anthropic, or Google Gemini API key, it is encrypted at rest (AES-256-GCM) before storage and is never shared with anyone other than the AI provider you chose, solely to generate your content.
• Generated content: blog posts, meta titles/descriptions, and related metadata the App creates and publishes to your store on your behalf.
• Storefront scan data: screenshots and technical checks of your own public storefront pages (not customer data), used to power the Conversion Rate Optimization (CRO) and Site Audit features.
• Storefront password (only if your store is password-protected, e.g. a pre-launch store): stored encrypted, used only to let our scanner view your storefront the same way a visitor would.
• Google Search Console data (optional): if you connect Search Console, we store an encrypted OAuth token and read your site's search performance metrics to show them inside the App.

We do not collect or process your customers' personal data (no order data, no customer names, emails, or addresses). The App only requests Shopify access scopes related to products, content/blogs, and online store navigation.

2. How We Use Information

Data is used solely to provide the App's features: generating and publishing content, running storefront scans, and displaying SEO/CRO insights inside your Shopify admin. We do not sell or rent your data.

3. Third-Party Services

• Your chosen AI provider (OpenAI / Anthropic / Google), only when you supply your own API key, governed by that provider's own terms.
• Google APIs (PageSpeed Insights, Search Console) for performance and search-visibility data.
• Pexels, for optional royalty-free stock images used in generated posts.

4. Data Retention & Deletion

Your data is retained for as long as the App is installed. When you uninstall the App, we process Shopify's mandatory compliance webhooks (customers/data_request, customers/redact, shop/redact) and delete your shop's stored data accordingly.

5. Security

Sensitive values (API keys, storefront passwords, OAuth tokens) are encrypted at rest. Access to production systems is restricted to the App's operator.

6. Your Rights

You may request a copy of, or deletion of, your store's data at any time by contacting us below, or by uninstalling the App.

7. Changes to This Policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

8. Contact

Questions about this policy or your data: mh6824213@gmail.com or aliyanahmed.dev@gmail.com