Smart SEO Privacy Policy

Smart SEO — Privacy Policy

Last updated: March 24, 2026

This Privacy Policy describes how Seven Spikes Ltd. (“we,” “us,” or “our”) collects, uses, stores, and shares information when you install or use the Sherpas: Smart SEO application (“the App”) on your Shopify-powered store. By installing the App, you agree to the practices described in this policy.

1. Information We Collect

1.1 Shopify Store Data

When you install the App, we access the following data from your Shopify store through the Shopify API:

  • Store owner information: name, email address, phone number, city, and country.
  • Store metadata: store name, domain, Shopify plan, and locale settings.
  • Product and content data: product titles, descriptions, images, collections, pages, blog posts, and theme files — used to generate and optimize SEO metadata.

We do not collect your customers’ personal information, payment details, order histories, or any visitor/shopper data from your store.

1.2 Google Search Console Data

If you choose to connect your Google Search Console account, we access:

  • Search analytics data: keyword impressions, clicks, click-through rates, and average search position for your verified sites.
  • Site verification status.

This data is accessed through the Google Search Console API using OAuth 2.0 authorization that you explicitly grant. You may disconnect your Google Search Console account at any time from within the App.

1.3 Google Ads API Data

The App uses the Google Ads API solely to provide the Keyword Suggestions feature. Specifically, we retrieve:

  • Keyword search volume estimates (average monthly searches).
  • Keyword competition levels.
  • Historical monthly search volume trends.

This data is retrieved from Google’s aggregated keyword planning data. We do not access, manage, modify, or view any Google Ads campaigns, ad groups, ads, billing information, or advertiser account data. The Google Ads API is used exclusively for read-only keyword research purposes.

2. How We Use Your Information

We use the information we collect for the following purposes:

  • Providing the Service: generating and optimizing SEO meta titles, meta descriptions, alt text, structured data (JSON-LD), and detecting broken links on your store.
  • Keyword Research: displaying keyword search volume data and trends to help you make informed SEO decisions.
  • Search Performance Tracking: showing your store’s search engine rankings, impressions, and clicks when you connect Google Search Console.
  • AI-Powered Content Generation: sending product and page data to AI services to generate optimized SEO content on your behalf (see Section 4).
  • Communication: contacting you about your account, providing support, and sending product updates.
  • Improving the App: analyzing usage patterns to optimize features and fix issues.

3. Google API Services — Limited Use Disclosure

Smart SEO’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In particular:

  • We only use Google API data to provide and improve the App’s user-facing features (keyword research and search performance tracking).
  • We do not transfer Google API data to third parties, except as necessary to provide the Service, as required by law, or with your explicit consent.
  • We do not use Google API data for advertising, profiling, or building user segments.
  • We do not allow humans to read Google API data, except with your affirmative consent, for security/abuse investigation, to comply with law, or when the data is aggregated and anonymized for internal operations.

4. Third-Party Service Providers

To deliver the Service, we use the following categories of third-party providers:

Provider Category Purpose Data Shared
AI Content Generation Generating SEO-optimized meta titles, descriptions, alt text, and structured data. Product/page titles, descriptions, and image URLs are sent to AI language model providers for content generation.
Site Crawling & Analysis Broken link detection, on-page SEO audits, and backlink analysis. Your store’s publicly accessible domain and page URLs.
Customer Support In-app messaging and support. Store name, owner name, email, and app usage context.
Cloud Infrastructure Hosting, data storage, and application monitoring. All data described in this policy is stored on Microsoft Azure infrastructure.
Email Communications Transactional and product update emails. Store owner email address.

All third-party providers are contractually required to protect your data and use it only for the purposes described above.

5. Data Storage and Security

  • Storage locations: Your data is stored on Microsoft Azure servers (SQL Database and Cosmos DB).
  • Keyword research cache: Keyword search results from Google Ads API are cached for up to 7 days to improve performance, then automatically deleted.
  • Google Search Console tokens: OAuth credentials for your Google Search Console connection are stored securely in our database and are used only to retrieve search analytics on your behalf.
  • Encryption: Sensitive credentials are encrypted at rest. All data in transit is protected using TLS/HTTPS.

6. Data Retention

We retain your data for as long as the App is installed on your store. When you uninstall the App:

  • Your Google Search Console authorization is revoked.
  • Cached keyword data expires automatically (within 7 days).
  • You may request complete deletion of all your data at any time by contacting us (see Section 10).

7. Sharing Your Information

We do not sell, rent, or trade your personal information. We may share your information only in the following circumstances:

  • Service providers: as described in Section 4, strictly to operate the App.
  • Legal compliance: to comply with applicable laws, regulations, legal processes, or enforceable governmental requests.
  • Protection of rights: to enforce our terms of service, or protect the rights, property, or safety of our users or the public.

8. Your Rights

All Users

You have the right to:

  • Request access to the personal information we hold about you.
  • Request correction, update, or deletion of your personal information.
  • Disconnect your Google Search Console account at any time from within the App.
  • Uninstall the App, which stops all data collection immediately.

European Economic Area (EEA) Residents

If you are located in the EEA, you have additional rights under the General Data Protection Regulation (GDPR), including the right to access, rectify, port, and erase your data, as well as the right to restrict or object to processing. Our legal basis for processing is the performance of our contract with you (providing the Service) and our legitimate business interests.

When we transfer personal data outside the EEA, we rely on Standard Contractual Clauses (pursuant to EU Commission decisions) to ensure an adequate level of data protection.

California Residents

Under the California Consumer Privacy Act (CCPA), California residents have the right to know what personal information is collected, request its deletion, and opt out of its sale. We do not sell personal information.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes to our practices, the App’s features, or for legal and regulatory reasons. We will notify you of material changes by updating the “Last updated” date at the top of this page.

10. Contact Us

If you have questions about this Privacy Policy, wish to exercise your data rights, or would like to file a complaint, please contact us:

Seven Spikes Ltd.
Serdikijski Sabor St.
Jujen Park, bl. 27, entrance A, ap. 15
Sofia – 1421, Bulgaria

Email: [email protected]