Privacy Policy

Last updated June 2026

This policy explains what data SEO Autonomy accesses, why, and how we handle it. SEO Autonomy is built to need as little data as possible.

What we access

Shopify store content — products, collections, pages, and theme/SEO metadata. Read-only by default; write access is used only for the changes you authorize when you enable autopilot.
Google Search Console performance — your aggregate query, click, impression, and position data, read-only. This is how SEO Autonomy measures whether its work helped.
No customer personal data. SEO Autonomy does not request, access, or store your customers' names, emails, addresses, orders, or any personally identifiable information. It operates at Shopify's "Level 0" data tier.

Solely to diagnose your store's SEO, perform the SEO work you authorize, and report the results. We do not sell your data or use it for advertising.

Cloudflare — hosting and database (where your store's SEO data and access tokens are stored). Shopify and Google access tokens are encrypted at the application layer (AES-256-GCM) before they touch the database.
Anthropic (Claude) — the reasoning engine. Your store's SEO data (titles, descriptions, Search Console queries, catalog metadata) is sent to Claude to generate diagnoses and content. No customer personal data is sent. Anthropic does not train on this data via the API.
Google — the Search Console API, to read your performance data.

When you uninstall, your Shopify and Google Search Console access and refresh tokens are immediately cleared and writing is disabled.
We honor Shopify's data-erasure requests: on shop/redact (sent 48 hours after uninstall) we delete all of your store's data from our systems.
You can request deletion at any time at support@seoautonomy.com.