Privacy Policy

Last updated: 2026-09-28

RankEngine SEO AEO ("RankEngine", "we", "us") respects your privacy. This policy explains what data we collect, how we use it, and your rights.

1. What we collect

RankEngine is a Shopify-installed app. When you install it, Shopify gives us an access token limited to the permissions you approved on Shopify's install screen. We use it to read and change your store's catalogue and content:

  • Products, collections, pages, articles and blogs — titles, descriptions, SEO fields, images, handles, tags and translations.
  • Theme files we have permission to change: the theme app embed you switch on, and a theme file edited when you apply the heading-order fix (backed up first and restored if the change does not read back as written).
  • URL redirects we create when a handle changes.
  • Shop metadata — name, primary domain, locales and plan.
  • Orders, through the RankEngine web pixel, only when the shopper has given analytics consent in your store: the order id, total, currency, the landing page of the visit and its referrer. We use this to show which pages and channels led to sales. The pixel sends no customer name, email, address, phone number, payment detail or line items.

2. What we do NOT collect

RankEngine does not read or store:

  • Customer personal data — names, email addresses, phone numbers, physical or shipping addresses, or payment information. We have not requested Shopify's customer or order permissions.
  • Customer records or profiles. Orders reported by the pixel are stored by order id, landing page and amount, never against a customer.
  • Cart contents or line items.
  • Anything outside what storefront SEO and revenue attribution on your own store require.

3. How we use your data

Your store's data is used only to:

  • Compute SEO scores and find issues.
  • Generate fix suggestions and content (alt text, meta descriptions, articles).
  • Apply fixes you apply, or that Autopilot rules you switched on apply, and verify them.
  • Adapt brand-voice prompts to samples you provide.
  • Report search, AI-visibility and revenue results back to you.

We do not sell, lease or share your data with third parties for their own use.

4. Service processors we use

  • AI model providers (OpenAI, Anthropic and Google models, reached through Cloudflare's AI gateway or directly) — content generation, image alt text, meta descriptions, embeddings for semantic search, quality checks and AI-visibility probes. Only the content needed for the task is sent.
  • Search data providers — keyword volume, competitor data, rank tracking, backlinks, Domain Rating (Ahrefs) and public-page diagnostics. They receive public URLs and keywords, not store data.
  • Google — Search Console data only after you connect it, and PageSpeed for public-page audits.
  • Fly.io — hosting for the RankEngine application and its Postgres database, in the United States.
  • Cloudflare — CDN, security and DDoS protection for public surfaces.

5. Data location, security & retention

Data is stored on Fly.io in the United States. Traffic is encrypted in transit (TLS). Tokens for connected Google accounts are encrypted in the database with AES-256-GCM. We keep your data while the app is installed. When you uninstall, background work for your store stops; when Shopify sends its shop/redact request, every table holding your store's data is deleted, as required by GDPR Article 17.

6. GDPR compliance

We answer Shopify's mandatory privacy webhooks:

  • customers/data_request — we hold no customer-identifying data, so there is no per-customer record to return.
  • customers/redact — there is no customer data to delete.
  • shop/redact — deletes all of the store's data.

7. Cookies and analytics

Inside the Shopify admin, RankEngine authenticates with Shopify session tokens; it sets no tracking cookies there. On the marketing site at rankengine.app we use Google's tag (Google Analytics) and the OpenAI Ads measurement pixel to understand visits and measure our advertising, and Cloudflare may record anonymous request analytics. You can block these with your browser's privacy settings or a content blocker.

8. Your rights

You can:

  • Export your RankEngine data from Settings.
  • Delete your data by uninstalling the app; Shopify then sends the deletion request.
  • Ask what we hold about your store, or ask for deletion sooner, through support.

9. Contact

Questions about this policy? Contact RankEngine support.

10. Changes to this policy

We post material changes here and, where the law requires it, tell installed merchants in the app.