What we collect, why we use it, and how you stay in control.

1. Data we collect

The data we collect depends on which platform you use and which features you enable. We collect only what we need to operate the service.

Account and authentication data

When you create an account, we collect your email address, name (if provided), login verification tokens, access-control records, and account ownership information. WordPress and Shopify users both go through this same account layer.

WordPress site data

When you connect a WordPress site, the SEOWorkerAI plugin transmits the following to our platform: site URL, WordPress version, timezone, admin email, site description, brand instructions, geographic targeting settings, SEO preferences, synced user data, action status updates, execution logs, and content brief linkage details. This data is used to configure your SEOWorkerAI workspace and keep it in sync with your site.

Shopify store data

When you install the SEOWorkerAI app from the Shopify App Store, we request access to your store and may collect, store, and process the data below, solely to deliver the SEOWorkerAI service to you.

Store content we access

• Products: titles, descriptions, handles, metafields, status, and SEO metadata. We read and write product SEO fields to apply automated or approved SEO improvements.
• Pages and articles: online store page and blog article titles, content, handles, and SEO metadata. We read and write these to apply SEO improvements.
• Themes: theme publish events are monitored so SEO configurations can be re-validated after a theme change. We do not read or modify theme code.
• Store metadata: shop name, domain, timezone, currency, plan name, and primary locale. Used to configure your SEOWorkerAI workspace.
• Metafields: we read and write custom metafields on products and pages as part of structured SEO data workflows.
• Translations: where enabled, we read and write translated content fields to apply multilingual SEO improvements.

Data we do not access from Shopify

• We do not access customer personal data, order data, payment data, financial reports, or customer addresses through the Shopify API.
• We do not inject code into your Shopify storefront or checkout.
• We do not access or modify your Shopify billing or subscription settings.

Shopify OAuth access tokens

When you install the app, Shopify issues us an offline access token that allows background jobs (inventory sync, webhook processing, scheduled SEO actions) to continue operating on your behalf without requiring you to be actively logged in. This token is stored encrypted in our database and is used only for the operations listed above. It is revoked immediately when you uninstall the app or disconnect it from the SEOWorkerAI settings.

Shopify staff account linking (optional)

The SEOWorkerAI embedded app includes a Connect my account button that lets Shopify staff members link their Shopify identity to a SEOWorkerAI dashboard account. This step is entirely optional and requires an explicit action. No staff user data is collected without this click.

When a staff member clicks Connect my account, we retrieve the following directly from Shopify via an online token exchange: first and last name, email address, and account type (store owner or staff). This data is used to create or update a SEOWorkerAI user account so the staff member can log in at app.seoworkerai.com, manage SEO changes, and control team access. Store owners receive the Owner role; staff members receive the Admin role by default. Roles can be changed from within the dashboard.

Shopify webhooks

Shopify sends us automated event notifications (webhooks). Each one is verified using Shopify’s HMAC signature before processing. The events we listen for are:

• App uninstalled: we immediately revoke the offline token and suspend the associated SEOWorkerAI workspace. No further Shopify API calls are made after uninstall.
• Products created, updated, or deleted: we update our local inventory index so SEO recommendations stay accurate.
• Theme published: we re-validate SEO configurations that may be affected by the new theme.
• Customers data request (GDPR): if a merchant’s customer submits a data access request, Shopify forwards it to us. We process it within 30 days. Because we do not store customer personal data from Shopify, our response will confirm that no such data is held.
• Customers redact (GDPR): we process the erasure request within 48 hours. Because we do not store customer personal data from Shopify, this operation confirms no data was held.
• Shop redact (GDPR): if a merchant uninstalls the app and requests store data erasure, we permanently delete all store-related records (inventory index, SEO action queue, content briefs, automation settings, and the associated workspace) within 48 hours of receiving the webhook. Billing records required for legal or financial compliance may be retained as described in Section 7.

Shopify billing

SEOWorkerAI may offer paid plans billed through Shopify’s billing API. In that case, billing is handled entirely by Shopify and subject to Shopify’s own privacy policy. We receive only plan status and billing confirmation data, not payment card information.

2. How we use your data

We use collected data only to provide and improve the SEOWorkerAI service. The specific purposes are:

For all users (WordPress and Shopify)

• Register and verify sites or stores
• Authenticate users and manage account sessions
• Process billing and enforce plan quotas
• Initialize and maintain provider connections (Google, AI providers)
• Generate content briefs and SEO recommendations
• Display and execute SEO action queues
• Maintain audit logs and execution history
• Debug failures and prevent duplicate processing
• Monitor abuse and protect operational security

Specific to WordPress users

• Sync page inventory from your WordPress site to surface optimization opportunities
• Apply approved SEO changes directly to your WordPress content via the plugin
• Provide REST API diagnostics for plugin connectivity troubleshooting

Specific to Shopify merchants

• Build and maintain an inventory index of your products and pages
• Identify SEO improvement opportunities across your storefront
• Generate and queue SEO action proposals for your approval
• Apply approved SEO changes to product and page metadata in Shopify
• Register and maintain webhook subscriptions
• Respond to GDPR compliance requests as described in Section 1

We do not use your data (from either platform) to train generalized AI models. We do not sell your data. We do not use your data for advertising purposes.

3. Google API and connected accounts

If you connect Google Search Console, we access property identifiers, search performance data, query and page performance summaries, indexing or visibility-related metadata, and other read-only Search Console data needed to surface SEO opportunities, support audits, and generate recommendations inside SEOWorkerAI. This applies whether your site runs on WordPress or Shopify.

If you connect Google Analytics, we access read-only traffic, engagement, landing-page, and reporting data needed to add performance context to audits, recommendations, action queues, and content-brief workflows.

If you sign in using Google sign-in or Google One Tap, we process your Google account identifier, name, email address, profile image, and login verification data to authenticate you and associate your login with the correct SEOWorkerAI account.

Use of Google user data with AI providers. SEOWorkerAI uses third-party AI services for features such as content brief generation, SEO recommendations, audit analysis, and action-queue workflows. Data derived from your connected Google accounts may be included as input to these providers. The AI providers currently integrated are:

• Google Gemini (Google LLC): Privacy Policy
• OpenAI (GPT models): Privacy Policy
• Anthropic (Claude models): Privacy Policy

These providers act as data processors on our behalf. Data sent to them is used only to fulfill the specific feature you requested. Not all providers are active at all times; the platform routes requests based on availability and feature context.

Restrictions on use of Google user data. We do not sell Google user data. We do not use Google user data to train generalized AI or machine learning models. Where Google-connected data is sent to AI providers, that use is strictly limited to operating the specific SEOWorkerAI feature you requested for your own account or site. Each AI provider we use operates under API terms that prohibit training on API-submitted data.

You can revoke Google access from within the WordPress plugin, the Shopify embedded app settings, or through your Google account permissions page. You can also request deletion of Google-connected records by emailing [email protected]. Revocation or deletion may disable Google-connected SEO features until access is restored.

4. Cookies and tracking

We use cookies and similar tracking technologies on the SEOWorkerAI platform dashboard (app.seoworkerai.com) and on the marketing website (seoworkerai.com).

Types of cookies we use

• Strictly necessary cookies: required for the platform to function. These include session tokens, authentication state, and CSRF protection. You cannot opt out of these while using the service.
• Functional cookies: remember your preferences such as language, timezone, and last-visited section. These are set by us and expire when your session ends or after a fixed period.
• Analytics cookies: we use Google Analytics to understand how users interact with the marketing website and the platform dashboard. This data is aggregated and does not identify you personally. The data is used to improve the product.
• Third-party cookies: embedded forms, support tools, or third-party widgets may set their own cookies subject to those providers’ privacy policies.

How to manage cookies

You can control cookies through your browser settings. Blocking or deleting strictly necessary cookies will prevent the platform from working correctly. For analytics cookies, you can opt out by installing the Google Analytics Opt-out Browser Add-on. You can also use browser privacy modes or ad-blocking extensions to limit tracking.

Shopify merchants: the SEOWorkerAI Shopify app is an embedded app within the Shopify Admin. It does not set cookies on your storefront or interact with your customer-facing shop pages.

5. Third-party providers and AI integrations

Depending on the features you use, data may be processed by the following third parties:

• Google: Search Console, Analytics, and authentication integrations (see Section 3)
• OpenAI, Anthropic, Google Gemini: AI-powered SEO features (see Section 3 for privacy policy links)
• DataForSEO: keyword research, SERP data, and SEO research inputs used to power recommendations and content briefs
• Shopify: for Shopify app users, data flows through Shopify’s infrastructure as described in Section 1
• Infrastructure providers: hosting, storage, database, and compute services
• Email delivery providers: transactional and notification email (magic links, billing confirmations, support replies)
• Payment processor: billing and subscription management. We use Stripe for WordPress plan billing and Shopify Billing for Shopify app subscriptions.
• Analytics and logging tools: operational monitoring, error tracking, and performance measurement

Each service processes data according to its own terms and privacy policies. We may also disclose information if required by law, to enforce our agreements, to detect fraud or abuse, or to protect the rights, safety, and security of our users or the service.

6. Payment and billing

Payments for WordPress plan subscriptions are processed by Stripe. Payments for Shopify app subscriptions are handled through the Shopify Billing API. In both cases, the payment processor manages card data directly. We receive only transaction identifiers, subscription status, billing history, plan information, and related records needed to activate, enforce, refund, or support your account. We do not store full payment card numbers on our servers.

Where required, we may retain billing records for tax compliance, fraud prevention, and legal purposes even after account deletion or subscription cancellation, as permitted by applicable law.

7. Retention and deletion

We retain account, billing, operational, and audit data for as long as reasonably necessary to provide the service, maintain records, resolve disputes, comply with legal obligations, and protect against abuse.

WordPress users

When you disconnect your WordPress site or close your account, site data (page inventory, SEO action logs, content briefs, and configuration) is scheduled for deletion. Some billing records may be retained for legal and compliance purposes. Google-connected tokens are revoked at disconnection and purged after expiry.

Shopify merchants

When a Shopify merchant uninstalls the SEOWorkerAI app and Shopify sends a shop/redact webhook, we permanently delete all store-related data, including the inventory index, SEO action queue, content briefs, automation settings, and the associated workspace, within 48 hours. This applies regardless of subscription status. Billing records required for legal, tax, or financial compliance may be retained afterward as permitted by applicable law.

If you need to confirm or accelerate deletion of your store data, contact us at [email protected].

Requesting account or data deletion

To request deletion of your account or connected data, email [email protected]. Include your account email and a description of what you would like deleted. Some records may be retained where required by law.

8. Security

We implement administrative, technical, and organizational measures to protect the data we hold. These include role-based access controls, encrypted storage of sensitive tokens (including Shopify offline access tokens and Google OAuth tokens), audit logs, HMAC verification for incoming webhooks, and controlled service-to-service communication over HTTPS.

No method of storage or transmission is completely secure. We cannot guarantee absolute security, but we work to minimize risk and respond quickly if a security issue occurs.

9. Your privacy rights

Depending on where you live, you may have rights regarding the personal data we hold about you. We honor these rights for all users regardless of jurisdiction.

Rights available to all users

• Access: request a copy of the personal data we hold about you.
• Correction: ask us to correct inaccurate or incomplete data.
• Deletion: ask us to delete your personal data. Some records may be retained for legal purposes.
• Restriction: ask us to limit processing of your data in certain circumstances.
• Portability: request your data in a structured, machine-readable format.
• Objection: object to processing based on legitimate interests.

California residents (CCPA / CPRA)

If you are a California resident, you have the right to know what personal information we collect, use, disclose, and sell about you; the right to delete your personal information; the right to opt out of any sale of your personal information; and the right not to be discriminated against for exercising these rights. We do not sell personal information. We do not share personal information for cross-context behavioral advertising. To submit a California privacy request, email [email protected] with the subject line “California Privacy Request”.

EEA, UK, and Swiss residents (GDPR)

If you are in the European Economic Area, the United Kingdom, or Switzerland, our legal bases for processing your data are: contract performance (to deliver the service you signed up for), legitimate interests (to operate and improve the service, prevent fraud, and maintain security), legal obligation (to comply with applicable law), and consent (where we have asked for it explicitly). You have the right to lodge a complaint with your local supervisory authority if you believe we are not handling your data lawfully.

How to submit a privacy request

To exercise any of the rights above, email [email protected]. Include your account email address, the nature of your request, and, for Shopify-related requests, your store domain (for example, yourstore.myshopify.com). We aim to respond within 30 days.

10. Children’s privacy

The SEOWorkerAI platform and apps are not directed at children under the age of 13 (or 16 in certain jurisdictions). We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child, we will delete it promptly. If you believe a child has provided us with personal data, please contact us at [email protected].

11. Changes to this policy

We may update this privacy policy from time to time to reflect changes in the service, new features, legal requirements, or updated data practices. When we make material changes, we will update the effective date at the top of this page. For significant changes that affect how we use your data, we may also notify you by email or through a notice in the platform dashboard.

Continued use of SEOWorkerAI after a policy update means you accept the updated policy. If you do not agree to the updated terms, you should stop using the service and request account deletion.

12. Contact us

For any privacy-related questions, data access requests, deletion requests, or Shopify data subject requests, contact us at:

Email: [email protected]
Product: SEOWorkerAI
Operator: Ateeq Ur Rehman (TechingEdge)

Include your account email address, the platform you use (WordPress or Shopify), and a clear description of your request. For Shopify data requests, include your store domain. We aim to respond within 30 days.

You can also use the Contact Us page on this website to reach us.