Privacy Policy

StoreRanker by NerdLabs — Last updated: April 27, 2026

1. Introduction

StoreRanker ("we", "our", "us") is a Shopify app developed by NerdLabs that automates SEO optimization, blog post generation, and external syndication for Shopify merchants. This privacy policy explains how we handle data.

2. Data We Collect

Store configuration: Your app settings including keyword bank, blog automation cadence, content type preferences, and review/auto-publish modes. Stored in our database to power the app.
Product and collection metadata: Read from your Shopify store via the Admin API to generate optimized meta titles and descriptions. We do not copy your full product catalog into our database — we read it on demand and store only the resulting SEO history (before/after meta values).
Generated content: Blog post drafts and published posts created by the app, retained so you can edit, revert, or audit them.
Subscription state: Your selected plan tier, billing period boundaries, and credit usage. Used to enforce plan limits and show your remaining balance.
Session data: Shopify session tokens required for app authentication.

3. Data We Do NOT Collect

StoreRanker does not collect, store, or process:

Customer names, emails, addresses, or contact information
Order or transaction details
Payment or billing card information (Shopify handles all billing)
Browsing behavior or visitor tracking data
IP addresses of your customers
Any personally identifiable information (PII) of your customers

4. How We Use Data

We use collected data solely to:

Generate optimized meta titles, descriptions, and blog content for your store
Apply approved SEO changes to your products and collections via the Shopify Admin API
Publish blog posts to your Shopify blog and external syndication platforms
Enforce your plan's monthly credit allowance and surface usage on the dashboard
Provide product support when you contact us

5. Third-Party Services

StoreRanker uses the following third-party services. Data sent to them is limited to what is necessary for the function described.

OpenAI: We send prompts containing your product descriptions, keyword bank entries, and blog topic context to OpenAI's API to generate SEO copy and blog posts. OpenAI's API does not retain or train on this data.
DataForSEO: Keywords you enter in your bank are sent to DataForSEO to fetch search-volume and SERP data.
External blogging platforms: Generated blog posts are republished on third-party blogging platforms (such as Telegra.ph, WordPress.com, and similar services) with canonical links pointing back to your store.
Mailgun: Used to send budget alert emails to you when your credits are running low.
Google Search Console (optional): If you connect GSC, we read your search performance data to inform keyword recommendations. OAuth tokens are encrypted at rest.

6. Data Sharing

We do not sell, rent, or share your data with any third parties beyond the service providers listed in Section 5. Your store data is only accessible to you through the StoreRanker admin and to NerdLabs operators for support purposes.

7. Data Retention & Deletion

We retain your data while StoreRanker is installed. On uninstall, your Shopify session token is deleted; your store configuration, SEO history, and blog content are retained for 30 days in case you reinstall, then permanently deleted. On a shop redaction request from Shopify or a direct deletion request from you, we delete all data associated with your store within 30 days.

8. Data Security

All data is transmitted over HTTPS. API keys, OAuth refresh tokens, and other credentials are encrypted at rest with AES-256-GCM. Access to production systems is restricted to authorized NerdLabs operators.

9. GDPR Compliance

StoreRanker supports Shopify's mandatory GDPR webhooks:

Customer data request / customer redaction: StoreRanker does not store customer personal data, so there is nothing to export or erase.
Shop redaction: All store data is deleted within 30 days of a shop redaction request.

10. Changes

We may update this policy from time to time. Significant changes will be communicated through the app or via email to the merchant address on file.

11. Contact

For privacy questions, data deletion requests, or anything else: support@nerdlabs.us.