Privacy Policy
Last updated: June 18, 2026
1. Introduction
RankPilot ("we", "our", or "us") is a Shopify application developed by Arvopeak. This Privacy Policy explains how we collect, use, and protect information when you install and use RankPilot on your Shopify store.
2. Information We Collect
When you install RankPilot, we collect and store the following information:
- Shop information: Your Shopify store domain, shop name, and plan details
- Product data: Product titles, handles, meta titles, meta descriptions, and SEO scores — fetched from your Shopify store via the Admin API
- Usage data: AI generation usage counts, scan history, and feature usage statistics
- Session tokens: Shopify OAuth access tokens required to access your store's Admin API
We do not collect personal information about your customers. We do not store customer names, emails, payment details, or order data.
3. How We Use Your Information
We use the information we collect to:
- Provide SEO analysis, scoring, and AI-powered meta tag generation for your products
- Inject JSON-LD structured data (schema markup) into your product pages
- Monitor page speed and Core Web Vitals for your store
- Track SEO improvements over time through analytics
- Enforce plan limits (free vs paid features)
- Send you important notifications about your store's SEO health (if enabled)
4. AI Services
RankPilot uses third-party AI services to generate SEO content:
- Free plan: Google Gemini API — product titles and descriptions are sent to Google's Gemini API to generate meta tags
- Paid plans: OpenAI GPT-4o mini — product information is sent to OpenAI's API to generate meta tags and descriptions
Only product titles, descriptions, vendor names, and product types are sent to these APIs. No customer data is ever transmitted.
5. Data Storage
Your data is stored on a secure VPS server. We use industry-standard security measures including encrypted connections (HTTPS/TLS) and access controls. Access tokens are stored securely and used only to communicate with Shopify's Admin API on your behalf.
6. Data Sharing
We do not sell, rent, or share your data with third parties except:
- AI providers (Google Gemini, OpenAI) as described in Section 4 — only product content, never customer data
- Google PageSpeed Insights API — your store URLs are submitted to check page speed scores
- When required by law or to protect our legal rights
7. Data Retention
We retain your store data for as long as RankPilot is installed. When you uninstall RankPilot, your session tokens are immediately deleted. SEO scan history and product data are retained for 90 days after uninstall and then permanently deleted.
8. GDPR Compliance
RankPilot is compliant with Shopify's mandatory GDPR webhook requirements. We respond to the following webhook events:
- customers/data_request: We confirm we hold no personal customer data
- customers/redact: We confirm customer data is not stored in our system
- shop/redact: Upon receiving this webhook, we permanently delete all shop data within 48 hours
9. Your Rights
You have the right to:
- Request a copy of all data we hold about your store
- Request deletion of your store's data at any time by contacting us or uninstalling the app
- Opt out of non-essential data collection
10. Cookies
RankPilot is an embedded Shopify app and does not use cookies on your storefront. The app runs entirely within the Shopify Admin interface.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the date at the top of this page. Continued use of RankPilot after changes constitutes acceptance of the updated policy.
12. Contact Us
For privacy-related questions or data requests, please contact us: