Privacy Policy

5. Shopify Integration and Compliance

For merchants using our Shopify integration, we comply with all Shopify App Store requirements and privacy guidelines:

• We only request necessary API access scopes
• All data is securely exchanged using TLS/SSL encryption
• Customer data collected is returned to your Shopify admin
• We comply with the Shopify API License and Terms of Use
• We use session tokens for authentication (no third-party cookies)
• All payments are processed through Shopify Billing API
• No personal data is stored outside Shopify without consent

6. Google user data (Search Console and Google Analytics)

You can connect Google Search Console and Google Analytics 4 to your SEOptimate project. You then sign in with your Google account and grant SEOptimate read-only access through Google's consent screen. We only request the permissions (scopes) we need:

• Google Search Console (webmasters.readonly): the list of properties you manage and search performance data such as clicks, impressions, click-through rate and average position per page and search query.
• Google Analytics 4 (analytics.readonly): the list of GA4 properties you have access to and aggregated report metrics such as sessions, active users, engaged sessions, key events and revenue, broken down by date, landing page and traffic channel.

6.1 How we use this data

• To show your search and traffic results in your SEOptimate dashboard and reports.
• To prioritise SEO actions and content recommendations for your website, for example which pages to improve first and whether published content delivers results.
• To show summaries of your results in the app and, if you have enabled this, to send them to you by email.

6.2 What we do not do

• We do not sell Google user data and do not use it for advertising.
• We do not share it with third parties, other than the hosting and infrastructure providers that run SEOptimate on our behalf and that are bound by a data processing agreement.
• We do not use Google user data to develop, improve or train generalised artificial intelligence or machine learning models.
• We do not transfer it to other apps. Access tokens are never exposed in your browser.

Access tokens are stored in our database on encrypted infrastructure, are accessible only to our servers and are used solely to retrieve the data described above. Report data is stored as aggregated snapshots linked to your project and is visible only to you and to the team members or agency you have given access to your project.

We keep this data for as long as the connection is active. When you disconnect the integration under Settings > Integrations, we immediately stop retrieving data and delete the stored access token and the associated Google data. If you delete your project or account, all linked data is deleted. You can also revoke SEOptimate's access at any time in your Google Account at https://myaccount.google.com/permissions.