Privacy Policy

Effective Date: April 17, 2026

1. Introduction

AEOWe ("we", "our", "us") provides a Shopify application that enables merchants to optimize their stores for AI search engines including ChatGPT, Claude, Gemini, Perplexity, and DeepSeek. This Privacy Policy describes how we collect, use, process, and disclose information when you install and use our application.

2. Information We Collect

2.1 From Shopify

• Store Information: Shop domain, store name, store owner email, and store currency. Used to identify your account and provide localized service.
• Access Tokens: Encrypted OAuth tokens that authorize our app to access your store data. These are stored encrypted at rest and can be revoked at any time via Shopify Admin.
• Product Data: Product titles, descriptions, images, tags, and SEO metadata. Used to generate LLMs.txt files and optimize product content for AI discovery.
• Analytics Data: Session data, conversation IDs, and event data (page views, add-to-cart, purchases) for tracking AI-driven traffic.

2.2 From AI Services

• Gemini API: Product content sent to Google's Gemini API for generating SEO/AEO optimizations. Data is processed in real-time and not stored by Google.
• OpenRouter API: Test prompts sent to multiple LLMs (ChatGPT, Claude, etc.) for visibility testing. No customer data is shared.
• DataForSEO API: Used to track AI mentions of your store. Only store domain is shared.

2.3 Technical Data

• Log Data: Error logs and performance metrics collected for debugging and service improvement. Retained for 7 days.
• Usage Analytics: Anonymous feature usage statistics to help us understand how merchants interact with our app.

3. How We Use Information

• LLMs.txt Generation: To create AI-optimized content files that help AI assistants discover your products.
• Product Optimization: To analyze and improve product content for better AI and search engine visibility.
• AI Visibility Testing: To test how your products appear in responses from various AI assistants.
• Analytics: To track AI-driven traffic, conversions, and provide insights about AI referral sources.
• Support: To investigate and resolve technical issues, and to communicate important service updates.
• Improvement: To analyze usage patterns and improve application performance and user experience.

4. Data Storage & Security

4.1 Infrastructure

• Database: Supabase PostgreSQL, hosted in US East (Virginia). All data is encrypted at rest using AES-256.
• Hosting: Vercel Edge Network, with automatic TLS 1.3 encryption for all data in transit.
• Backups: Automated daily backups retained for 30 days, encrypted and stored in geographically separate facilities.

4.2 Security Measures

• All access tokens are encrypted using industry-standard encryption algorithms
• Database access restricted to authorized services via network policies
• Regular security audits and dependency scanning
• Automated secret rotation for internal credentials
• All employee access requires multi-factor authentication

5. Third-Party Services

We utilize the following sub-processors to deliver our service:

Note: We do not engage in the sale of personal information to third parties, nor do we use customer data for advertising purposes beyond the explicit functionality of the application.

6. Data Retention

Upon uninstallation of the AEOWe application, we initiate automated deletion of all store-specific data within 30 days. Anonymized aggregate statistics may be retained for product improvement purposes.

7. Your Rights

Subject to applicable law, you have the following rights regarding your personal information:

• Right to Access: Request a copy of the personal information we hold about your store.
• Right to Rectification: Request correction of inaccurate or incomplete information.
• Right to Deletion: Request deletion of your personal information. Uninstalling the application initiates this process automatically.
• Right to Data Portability: Receive your data in a structured, machine-readable format (JSON).
• Right to Object: Object to processing based on legitimate interests.

To exercise these rights, contact privacy@aeowe.com. We respond to all verified requests within 30 days.

8. Compliance & Certifications

• GDPR: We act as a data processor for Shopify merchants who are data controllers. Our processing activities are covered by Standard Contractual Clauses.
• CCPA: We do not sell personal information. California residents may exercise their rights as described in Section 7.
• Shopify Platform: Our app complies with Shopify's privacy and data use requirements for listed applications.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. Material changes will be notified via email to the registered store owner and through the Shopify App dashboard at least 14 days before they become effective.

The current version of this policy will always be available at https://aeowe.vercel.app/privacy-policy.

10. Contact Information

For privacy inquiries, data subject requests, or questions about this policy:

© 2026 Warewe Consultancy Pvt. Ltd. All rights reserved.