Privacy policy

We collect information you provide directly to us, such as when you create an account, subscribe to our service, or contact us for support.

• Account information (name, email, company)
• Payment information (processed securely via Stripe)
• Usage data and analytics
• Communication preferences

We use the information we collect to:

• Provide, maintain, and improve our services
• Process transactions and send related information
• Send technical notices and support messages
• Respond to your comments and questions
• Monitor and analyze trends and usage

Our Ezeo SEO & GEO Audit Shopify app gives every store a free audit that needs no Ezeo account. Stores on the Ezeo Pro plan (billed by Shopify) or a private agency plan can also connect the store to Ezeo. The app creates content or changes catalog SEO fields only after a merchant reviews and confirms the exact change.

The audit (every store). Our app server fetches your public storefront — your homepage, a product page, a collection page, and robots.txt, sitemap.xml and llms.txt. At install the app requests one Shopify scope, read_themes: it reads your published theme's name on every audit, and its Liquid files when the live storefront cannot be reached (for example, a password-protected store). The app keeps the latest audit for each store (its score, theme name, issue counts and up to 25 top findings) so other pages of the app can show it; each new audit replaces it.

Optional Ezeo connection. If, and only if, you choose "Connect to Ezeo", you grant three more scopes:

• read_products — product and collection information
• write_content — create a blog draft, scheduled article or published article, only after you review it and choose that action
• write_products — update only a product or collection SEO title or SEO description after you confirm the exact values. Ezeo reads the result back from Shopify and keeps before/after history so the edit can be rolled back

Connecting sends the store's Shopify access token to Ezeo and syncs product and collection data. You can also connect Google Search Console, Google Analytics 4 and Microsoft Clarity. AI-search visibility monitoring is set up for a store on request. We do not send merchants a recurring or weekly report.

What we never access. The app does not request or access orders, customers, refunds, checkout data, sales or traffic reports, staff accounts, or blog-comment data, and it does not request read_reports, read_orders or read_customers. Shopify may group write_content with blog contributor access on its approval screen; we use it only to create the article you approve.

Storage. The app's own database (PostgreSQL on Railway) holds the store's offline access token, connection status, a cached plan, the latest audit and the history of changes you approved; the token is protected by access controls and not additionally encrypted by the app. When connected, Ezeo stores the token in an encrypted vault (Supabase Vault) alongside the synced catalog and the SEO workspace for the store. When you ask for content, the topic and relevant product details are sent to AI model providers through OpenRouter; your domain and keywords are sent to DataForSEO for ranking data.

Deletion. Uninstalling the app, or the shop/redact compliance webhook, deletes the app's stored data for the store, and on Ezeo deletes the stored token, the connection and the synced catalog and Shopify analytics data. An Ezeo workspace created for the store is archived rather than deleted; email us to have it deleted. The app holds no customer data, so customers/data_request and customers/redact have nothing to return or delete; we keep a record of each request, with only the store's ID and domain and Shopify's request ID, as evidence it was handled. The customer's details and order IDs in the request are discarded. You can disconnect at any time from the app's "Connect to Ezeo" page.

Operational telemetry. The embedded app records usage and errors through PostHog and Sentry, linked to the store's domain, and may record sessions in the app with all text and inputs masked. Tokens, authorization headers, query strings and webhook contents are filtered out. The app installs nothing on your storefront.

We take the security of your data seriously. We use industry-standard encryption and security measures to protect your information, including:

• SSL/TLS encryption for all data transfers
• Encrypted database storage
• Regular security audits and updates
• Limited access to personal information
• SOC 2 compliance (in progress)

You have the right to:

• Access your personal information
• Correct inaccurate data
• Request deletion of your data
• Export your data
• Opt-out of marketing communications