Privacy Policy — Shopigent AI GEO

Overview

Shopigent AI GEO ("we", "our", "the app") processes data from your Shopify store to provide Generative Engine Optimization (GEO) services: structured-data generation, AI-search visibility measurement, description optimization, an MCP (Model Context Protocol) interface for AI agents, and competitive comparison. This policy explains exactly what data we collect, which processors receive it, how long we keep it, and how you can have it deleted.

Data We Collect

From your Shopify store (via OAuth)

Product catalog data: titles, descriptions, prices, variants, images, tags, product types, vendors — used to generate GEO/JSON-LD schemas and to power MCP agent queries.
Store information: store name, myshopify.com domain, shop owner email, currency, timezone.
OAuth tokens: Shopify Admin API access tokens, required to read your catalog and write app-owned product metafields (JSON-LD) and optimized descriptions.
Per-check storefront password (optional): the app never stores storefront passwords. A merchant may supply a password for a single live HTML check of a password-protected development or preview storefront. It is sent to that storefront only for the check, never saved in the database, logs, caches, or results, and the input is cleared when the check is submitted.

From the legacy web-search simulation (disabled)

Historical note: while it was enabled, the simulation sent search queries derived from your product titles and store name to DuckDuckGo web search. It matched product titles, not your store, and never measured AI visibility. It is disabled and no new simulation queries are sent.

From Domain-Citation Measurements

What is stored: for each completed question we store the question text, the engine used, a short excerpt (up to 500 characters) of the provider's answer, the set of store domains the answer was checked against, and the citation and search-result URLs returned by the provider, classified against your store domains. Full raw provider responses are not stored.
What is sent: Buyer-style questions derived from your product titles are sent only to selected, available engines permitted by your plan: OpenAI (Responses API web search) and Perplexity (Agent API) on Growth; Pro can also select Grok (xAI Responses API web search) and Claude (Anthropic Messages API web search). Claude is manual-only and is excluded from scheduled runs and competitive comparison. Unselected or unavailable engines are not called. On Growth and Pro, if Weekly tracking is on (the default), those questions are also sent on a schedule, up to 4 times per month, without a separate click. No question names your store domain. Turn Weekly tracking off in Settings to stop scheduled questions. Manual runs are unchanged.
What counts as a mention: only a provider-attached citation to your store domain. Search-result listings and text-only name matches are stored separately and never counted as mentions.
Search queries (buyer-style prompts derived from your product titles), sent to:
- OpenAI (Responses API web search) — buyer prompts sent to check whether responses cite your store domain;
- Perplexity (Agent API, preset fast) — buyer prompts when selected and available;
- xAI (Grok Responses API web search) — buyer prompts when the Grok engine is selected on Pro and available;
- Anthropic (Claude Messages API web search) — buyer prompts when the Claude engine is selected on Pro and available.
Result data: the engine, status, a short answer excerpt (up to 500 characters), the store domains checked against, and the citation and search-result URLs returned by the providers, classified against your store domains.
Competitor data (Competitive Comparison): the competitor store URL you provide (its host is matched exactly) and up to 8 product handles you type. The app does not fetch the competitor store or copy its catalog. Citation URLs on that host are classified into the comparison insights.

From MCP API usage

API call metadata: per call we store the tool name, the timestamp, whether the call succeeded, and — for product-related tools — the product title or product ID that was queried. This is what powers your MCP usage statistics in Settings.
Usage quotas: call counts per month per API key (reserved against a rate-limit counter that also enforces the quota).

Real provider measurement is disabled for test installs, including development/reviewer stores with test subscriptions. Manual runs, scheduled runs, and competitive measurement do not send buyer prompts to providers on these installs, even with a paid test plan.

Third-Party Processors

Processor	What is sent	Why
Railway (EU/US infrastructure)	Application database and runtime	Hosting the app and its PostgreSQL database
Shopify	OAuth-authenticated API calls	Reading catalog, writing metafields/descriptions, billing
OpenAI	Product/store content for optimizer rewrites; buyer prompts derived from product titles for measurement	AI Rewrites (Optimizer); Real AI Measurement and Competitive Comparison when selected and available, including scheduled runs when Weekly tracking is on
Perplexity	Buyer prompts derived from product titles	Real AI Measurement when selected and available, including scheduled runs when Weekly tracking is on
xAI	Buyer prompts derived from product titles	Grok web-search measurement when selected on Pro and available, including scheduled runs when Weekly tracking is on
Anthropic	Buyer prompts derived from product titles	Manual Claude web-search measurement when selected on Pro and available; not scheduled runs or competitive comparison
DuckDuckGo	(While previously enabled) search queries derived from your product titles and store name	Legacy web-search visibility simulation — now disabled

We do not sell your data and we do not use it to train models.

How We Use Data

Purpose	Data used
GEO schema generation	Product titles, descriptions, prices, availability
Legacy web-search simulation (disabled)	Historical: product/store-derived queries were sent to DuckDuckGo
Real AI measurement	Buyer prompts derived from product titles sent to selected, available OpenAI/Perplexity engines, or xAI/Anthropic engines selected on Pro
Description optimization (AI Rewrite)	Product descriptions sent to OpenAI
Competitive comparison	The competitor store URL you provide (host matched exactly) and up to 8 typed product handles; no competitor-store fetch
MCP storefront for AI agents	Product catalog data you expose
Usage analytics	Per-call metadata (tool name, timestamp, queried product title/ID) and aggregated call/quota metrics

Data Storage & Security

All data is stored in a PostgreSQL database hosted on Railway (encrypted volume at rest, TLS in transit).
Shopify access tokens are stored server-side and are never exposed to the browser. Access is removed when the app is uninstalled or the token expires.
MCP API keys are stored only as SHA-256 hashes — plaintext keys are never persisted.
Webhook payloads are verified with HMAC-SHA256 before processing.

Retention & Deletion

Data is retained while the app is installed on your store.
On uninstall, all shop-linked data is deleted in a single transaction: sessions and API tokens, generated schemas and caches, discovery events, crawl jobs, competitive comparisons, rate-limit/quota records, and the shop record itself.
Shopify also mandates erasure of store data after uninstall via the shop/redact compliance webhook — the app performs the same full deletion.
Product-level deletion requests (products/delete webhooks) remove generated product schemas.

Your Rights

Access: request a copy of your data at shopigent@greeknous.com
Deletion: uninstall the app, or email us — deletion is executed via the transactional erasure described above
Export: download your weekly report as a CSV from the Reports page (schema JSON-LD files are served from your storefront HTML and from the product metafields, not as a dashboard export)

Contact

Privacy questions: shopigent@greeknous.com Data Protection: Michail Kalogeras, founder

Changes

We will notify you of material changes via the app dashboard. Note that if third-party AI API pricing changes, our plans may be adjusted with notice per our Terms of Service.