Privacy Policy

1. Introduction

PilotSEO ("we," "our," or "us") provides an AI-powered SEO optimization application for Shopify merchants. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you install and use the PilotSEO Shopify application.

By installing PilotSEO, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

Store Information

When you install PilotSEO, we collect and store: your Shopify store domain, store name, contact email address, Shopify plan name, and a secure access token that allows us to read and write product SEO metadata on your behalf.

Product Data

We access your product catalog to perform SEO analysis. This includes product titles, handles, types, tags, vendor names, current SEO meta titles and descriptions, and product image alt text. We do not access order data, customer personal information, payment information, or any data beyond what is necessary for SEO optimization.

Usage Data

We collect information about how you use PilotSEO, including agent run history, SEO changes proposed and published, credits consumed, and autonomy mode settings.

3. How We Use Your Information

We use the information we collect to:

• Analyze your product catalog and generate AI-powered SEO recommendations
• Apply approved SEO changes to your Shopify products via the Shopify API
• Track credit usage and enforce billing plan limits
• Run automated daily SEO scans when enabled
• Respond to webhook events from Shopify (product updates, app uninstalls)
• Provide customer support and improve the application

We do not sell, trade, or rent your personal information or store data to third parties.

4. Data Sharing and Third-Party Processors

We share limited data with the following third parties solely to provide the PilotSEO service:

• OpenAI, L.L.C. — product titles, descriptions, types, tags, and current SEO meta titles and descriptions are transmitted to OpenAI's API to generate AI-powered SEO recommendations. This data is processed in accordance with OpenAI's Privacy Policy. No customer personal information, order data, or payment data is included in these transmissions.
• Database Provider — store and product data is stored in a secure cloud database hosted within the United States.
• Shopify — we interact with the Shopify Admin API to read and update your product SEO metadata on your behalf.

We do not sell, trade, or rent your store data or any personal information to third parties for marketing or any other purpose.

4a. AI Processing Disclosure

PilotSEO uses OpenAI's GPT-4o-mini language model to analyze your product catalog and generate SEO optimization suggestions. Specifically, the following product fields may be sent to OpenAI for processing:

• Product title
• Product description (body HTML, stripped of HTML tags)
• Product type and vendor name
• Product tags
• Current SEO meta title and meta description
• Product image alt text

This data is used solely to generate SEO recommendations and is not used by OpenAI to train its models under the current API terms. No customer names, email addresses, order history, payment information, or other personally identifiable information is ever transmitted to OpenAI.

By using PilotSEO, you consent to your product data being processed by OpenAI for the purpose of generating SEO recommendations.

5. Data Retention

We retain your store data for as long as PilotSEO is installed on your store. When you uninstall PilotSEO, your store is marked as inactive. You may request complete deletion of your data by contacting us at the address below. We will process deletion requests within 30 days.

6. Security

We implement industry-standard security measures to protect your data, including encrypted storage of access tokens, HTTPS for all data transmission, and HMAC verification for all Shopify webhook payloads. However, no method of transmission over the internet is 100% secure.

7. GDPR and Data Subject Rights

If you are located in the European Economic Area, you have the right to access, correct, or delete personal data we hold about you. PilotSEO complies with Shopify's mandatory GDPR webhook requirements, including customer data request, customer data deletion, and shop data deletion endpoints.

To exercise your rights, contact us at the email address below.

8. Children's Privacy

PilotSEO is not directed to individuals under the age of 18. We do not knowingly collect personal information from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by updating the "Last updated" date at the top of this page. Continued use of PilotSEO after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us: