Privacy Policy

RankEngine SEO AEO ("RankEngine", "we", "us") respects your privacy. This policy explains what data we collect, how we use it, and your rights.

1. What we collect

RankEngine is a Shopify-installed app. When you install us, we receive an OAuth access token from Shopify scoped to the permissions you approved. We use this token to read and modify your store's catalog data only:

• Products, collections, pages, articles — title, description, SEO meta, images, handles, tags.
• Theme assets we have permission to modify (e.g. llms.txt, optimized image variants).
• Shop metadata — name, primary domain, plan tier.
• Aggregate analytics — page views, top pages (no per-customer data).
• Order totals and line-item products, used only to attribute revenue to the storefront pages we optimise. We read the order's date, total, currency, the products it contained, and the landing page and referrer that preceded it. These are aggregated immediately into daily per-shop, per-page and per-product totals.

2. What we do NOT collect

RankEngine does not read or store:

• Customer personal data — names, email addresses, phone numbers, physical or shipping addresses, or payment information. We hold Shopify's Level 1 protected-customer-data access and have deliberately not requested any of the fields that identify a customer.
• Individual customer records or profiles. Order data is aggregated into daily totals and is never stored against a customer.
• Cart or checkout content.
• Anything outside what is required for storefront SEO and revenue attribution on your own store.

3. How we use your data

Your store's catalog data is used solely to:

• Compute SEO scores and identify issues.
• Generate fix suggestions (alt text, meta descriptions, content).
• Apply fixes when you explicitly approve them.
• Train or adapt brand-voice prompts on samples you paste in.

We do not sell, lease, or share your data with third parties.

4. Service processors we use

• RankEngine AI services — content generation, image alt text, meta descriptions, semantic search, and quality checks.
• RankEngine search data services — keyword volume, competitor data, rank tracking, backlinks, and public-page diagnostics.
• Google integrations — Search Console, Analytics, and PageSpeed data only when you explicitly connect or request a public-page audit.
• Google Cloud — hosting and storage for the RankEngine application and database.
• Cloudflare — CDN, security, and DDoS protection for public surfaces.

5. Data location & retention

Data is stored in Google Cloud (us-central1). Encrypted at rest (AES-256) and in transit (TLS 1.2+). We retain your data while the app is installed. On uninstall, our app/uninstalled webhook fires; on a Shopify shop deletion, our shop/redact webhook performs full data deletion across every table holding your shop's data within 30 days as required by GDPR Article 17.

6. GDPR compliance

We are GDPR-compliant via Shopify's mandatory webhook contract:

• customers/data_request — returns 200. We hold no customer-identifying data: order information is stored only as shop-level daily aggregates and is never keyed to a customer, so there is no per-customer record to return.
• customers/redact — returns 200 (no customer data to delete).
• shop/redact — performs full per-shop data deletion in transactional batch.

7. Cookies

We use session cookies set by Shopify's App Bridge for embedded authentication. We do not use third-party tracking cookies. Visitors to the marketing site at rankengine.app may have anonymous analytics events captured by Cloudflare.

8. Your rights

You can:

• Export your RankEngine data — Settings → Data & Export → Export Data.
• Delete your data — uninstall the app; shop/redact fires automatically within 48 hours.
• Change app access — Billing → plan controls.

9. Contact

Questions about this policy? Contact RankEngine support.

10. Changes to this policy

We'll post material changes here and (where required by law) notify installed merchants via in-app banner.