Privacy Policy

StoreRanker by NerdLabs — Last updated: October 21, 2026

1. Introduction

StoreRanker ("we", "our", "us") is a Shopify app developed by NerdLabs that automates SEO optimization, blog post generation, and external syndication for Shopify merchants. This privacy policy explains how we handle data.

2. Data We Collect

Store configuration: Your app settings including keyword bank, blog automation cadence, content type preferences, and review/auto-publish modes. Stored in our database to power the app.
Product and collection metadata: Read from your Shopify store via the Admin API to generate optimized meta titles and descriptions. We do not copy your full product catalog into our database — we read it on demand and store only the resulting SEO history (before/after meta values).
Generated content: Blog post drafts and published posts created by the app, retained so you can edit, revert, or audit them.
Subscription state: Your selected plan tier, billing period boundaries, and credit usage. Used to enforce plan limits and show your remaining balance.
Session data: Shopify session tokens required for app authentication.
Support messages: If you message us from inside the app (including a free setup or customization request), we store your messages, your shop domain, the reply-to email address and name you provide or that Shopify lists for your store, and your admin language — used only to answer you and to email you when we reply.
Error reports: If a page of the app in your Shopify admin hits a technical error, your browser sends us the error message and stack trace, the page address (with login tokens removed), the browser type, and your shop domain (when the browser provides it), so we can find and fix the bug. Our support service on our DigitalOcean server stores the report and, through Mailgun, emails an alert with the error text and stack trace, page address and shop domain to our team's mailbox, which Google hosts. We keep error reports in our error log, separate from the app's store data, until we no longer need them to fix bugs, and anonymise or delete them on request. We keep the alert emails while we need them to fix the bug and delete them on request.

3. Data We Do NOT Collect

StoreRanker does not collect, store, or process:

Customer names, emails, addresses, or contact information
Order or transaction details
Payment or billing card information (Shopify handles all billing)
Browsing behavior or visitor tracking data
IP addresses of your customers
Any personally identifiable information (PII) of your customers

4. How We Use Data

We use collected data solely to:

Generate optimized meta titles, descriptions, and blog content for your store
Apply approved SEO changes to your products and collections via the Shopify Admin API
Publish blog posts to your Shopify blog and external syndication platforms
Enforce your plan's monthly credit allowance and surface usage on the dashboard
Provide product support when you contact us, including in-app support messages and free setup and customization help
Find and fix bugs, using the technical error reports described above

5. Third-Party Services

StoreRanker uses the following third-party services. Data sent to them is limited to what is necessary for the function described.

OpenAI: We send prompts containing your product descriptions, keyword bank entries, and blog topic context to OpenAI's API to generate SEO copy and blog posts. OpenAI's API does not retain or train on this data.
DataForSEO: Keywords you enter in your bank are sent to DataForSEO to fetch search-volume and SERP data.
External blogging platforms: Generated blog posts are republished on third-party blogging platforms (such as Telegra.ph, WordPress.com, and similar services) with canonical links pointing back to your store.
DigitalOcean: Hosts our servers and databases, including our support service, which stores technical error reports.
Google: Hosts our team's mailbox, which receives error alerts.
Mailgun: Used to send budget alert emails to you when your credits are running low, and our replies to your support messages (sent from support@nerdlabs.us to the reply-to address you give us). It also delivers our team's error alerts.
Google Search Console (optional): If you connect GSC, we read your search performance data to inform keyword recommendations. OAuth tokens are encrypted at rest.

6. Data Sharing

We do not sell, rent, or share your data with any third parties beyond the service providers listed in Section 5. Your store data is only accessible to you through the StoreRanker admin and to NerdLabs operators for support purposes.

7. Data Retention & Deletion

We retain your data while StoreRanker is installed. On uninstall, your Shopify session token is deleted; your store configuration, SEO history, and blog content are retained for 30 days in case you reinstall, then permanently deleted. On a shop redaction request from Shopify or a direct deletion request from you, we delete all data associated with your store within 30 days, except technical error reports, which are kept as described in Section 2. Support messages are deleted together with your store data when Shopify sends its store-deletion (shop redaction) request, or sooner on request. Backup copies of support messages age out within 30 days.

8. Data Security

All data is transmitted over HTTPS. API keys, OAuth refresh tokens, and other credentials are encrypted at rest with AES-256-GCM. Access to production systems is restricted to authorized NerdLabs operators.

9. GDPR Compliance

StoreRanker supports Shopify's mandatory GDPR webhooks:

Customer data request / customer redaction: StoreRanker does not store customer personal data, so there is nothing to export or erase.
Shop redaction: All store data is deleted within 30 days of a shop redaction request, except technical error reports, which are kept as described in Section 2.

10. Changes

We may update this policy from time to time. Significant changes will be communicated through the app or via email to the merchant address on file.

11. Contact

For privacy questions, data deletion requests, or anything else: support@nerdlabs.us.