Privacy Policy

Last updated: October 14, 2026

Metaglow SEO Privacy Policy

Metaglow SEO ("the app") is a Shopify app that scans a store's products, collections and pages for SEO issues and helps fix them. This page explains what data the app accesses, why, and what happens to it.

What the app can access

Metaglow SEO requests these Shopify Admin API scopes: write_products, write_content, write_online_store_navigation, and write_files (for image alt text and compressed image copies). In plain terms, that's your products, pages, collections, blog content, images, and URL redirects — the parts of your store that affect search results.

The app never requests access to customer data, orders, or payment information. It has no scope that would let it read or write any of that, and it doesn't need to — SEO doesn't touch customer records.

What the app stores

The app stores, on its own servers (not Shopify's), only what it needs to run scans and show your results over time:

  • Your shop domain and Shopify access token, so it can read and update your store's content
  • Scan results and SEO issues found (titles, descriptions, alt text, broken links) — the resource name and ID, not customer-facing traffic or sales data
  • Your store's billing and storefront currency, to price plans correctly and localize suggestions
  • How many AI-written suggestions you've used, to enforce plan limits
  • If you choose to connect Google Search Console (Premium, Exclusive and Agency plans only, and only if you click "Connect"): a Google refresh token and your search performance stats (clicks, impressions, top queries). This is entirely optional and can be disconnected at any time from the Search Console page in the app.
  • If you use review requests (Premium, Exclusive and Agency plans): the email addresses and optional first names you type in, the rating and comment a customer submits, when each email was sent and opened, and the reply email and public review link you set. The app does not read your customers from Shopify; it only holds what you enter.

Apart from the review-request details above, none of this is customer personal data. It's store-configuration and SEO-performance data. You are responsible for only asking people you have served, and every review-request email carries an unsubscribe link. Anyone who unsubscribes is kept on a suppression list so they are not emailed again.

Third parties the app uses

  • Anthropic (Claude) — when you use an AI-write feature, the relevant product/page title and description — and, for image alt text and some product descriptions, the product image itself — are sent to Anthropic's API to generate a suggestion. Nothing is sent unless you click an AI-write button. See Anthropic's privacy policy.
  • Google (PageSpeed Insights) — when you run the mobile speed test, your storefront's public web address is sent to Google's PageSpeed service. No customer or order data is involved.
  • Google (Search Console API) — only if you connect it. Read-only access to your verified Search Console property; the app never modifies anything in Search Console.
  • Resend — only if you send review requests. The recipient's email address, first name and the message are passed to Resend, which delivers the email. See Resend's privacy policy.
  • Hosting — the app runs on Render and stores its database on Neon, both of which host the app's infrastructure but do not independently access or use your data.

The app does not sell data, does not use your store's content to train any model, and does not share data with anyone beyond what's listed above.

Data retention and deletion

Your data is kept only while the app is installed. If you uninstall Metaglow SEO, Shopify notifies the app automatically and all stored data for your shop — access tokens, scan history, Google Search Console tokens, review requests and replies — is deleted. The app also honors Shopify's mandatory data-request and customer-redaction webhooks: when a customer's data is erased, any review request stored for that email address in your shop is deleted. Addresses that unsubscribed stay on the suppression list so they are not emailed again.

Security

All data is transmitted over HTTPS. Access tokens and Google refresh tokens are stored in the app's database and are never exposed to the browser or to any party other than the services listed above.

Contact

Questions about this policy, or a request to see or delete your store's data ahead of uninstalling: email alfredkt09@gmail.com. See also the Terms of Service.