XSEO PRIVACY POLICY

Last Updated: November 1, 2026

1. INTRODUCTION

XSeo (listed on the Shopify App Store as "XSeo - SEO & Image Optimizer") is
provided by B2B Gold, Ho Chi Minh City, Vietnam ("we," "us," or "our"). It is a
Shopify embedded app that improves a merchant's store speed and how the store
appears in search engines and AI answers: image compression and resizing in
each image's own format, image alt text, SEO titles and meta descriptions, URL
handles, product categories and barcodes, product and collection description
drafts, translations of SEO text and alt text, structured data and an image
sitemap for the storefront, redirects and a 404 monitor, and reports from
Google (PageSpeed Insights, the Chrome UX Report and, if you connect it, Search
Console) and, if you allow it, from your store's own Shopify analytics (visits
and sales from AI assistants, not yet available).
Every change XSeo
writes to your store's content is recorded so you can undo it. This Privacy
Policy explains how we handle information in compliance with applicable
privacy regulations and Shopify's requirements. By installing or using the
app, you agree to this policy.

2. INFORMATION WE COLLECT AND HOW WE USE IT

We collect the merchant and shop data described below to operate the app. XSeo
does not store personally identifiable information about your customers or end
shoppers. (If you write such information into a support request, it is kept as
described under "Support Requests".) The only data about shoppers' visits that
reaches XSeo is described under "Storefront Requests" and "404 Monitor" below,
together with what we do with it. Store-wide totals from your Shopify
analytics, if you allow them, are described under "Visits and Sales from AI
Assistants".

- Access Tokens: When you install the app we receive Shopify-issued offline
  access tokens (a short-lived access token plus a refresh token used to renew
  it), which we store securely to authenticate requests to Shopify on your
  behalf and to run optimization jobs you start.
- Shop Profile: When you first open the app after installing it, and again
  after some app updates, we read your shop's profile from Shopify and store
  it with your shop record: the shop domain and Shopify shop ID, your primary
  domain, the store owner's name, the store contact email, the store's billing
  address as recorded in Shopify (street address, city, province, postal code,
  country, phone number, and the approximate map coordinates Shopify provides
  for it), and store settings (Shopify plan, currency and money format, time
  zone, and whether the store has an online storefront). We use it to
  identify and support your shop, and to address and time the autopilot
  emails you turn on.
- Install Details: At the same moments we also record the IP address the
  request came from, the country of that address, and your browser's
  language. We keep them with your shop record for support and security, and
  use the language for your first speed measurement.
- Product Images: To optimize an image we read it from your store, process it,
  and write the optimized version back to your store. To make every change
  reversible, we keep a copy of each original image for 60 days in our cloud
  storage, after which it is deleted (sooner if you uninstall; see Data
  Retention).
- Store Content for Search: To improve how your store appears in search
  engines and AI answers, we read your products, collections, pages and blog
  posts (titles, descriptions, SEO titles and meta descriptions, URL handles,
  options, tags, product categories, variant barcodes and specification
  fields), your store's published languages and their translations, and your
  URL redirects. When you look for SEO text from another SEO app (on Search
  appearance, or when you open the site audit), XSeo also reads the metafields
  where such apps keep it on your products, collections, pages and blog
  posts, and one app's settings for it on your shop. It copies that text into
  Shopify's SEO fields only when you start the copy, and never changes or
  deletes the other app's data. We write the changes you make or approve in
  the app, or turn on as autopilot:
  - SEO titles and meta descriptions, and URL handles (with a redirect from
    the old address);
  - hiding a page from search engines;
  - product categories and barcodes, and image alt text;
  - product and collection descriptions you approved;
  - translations of SEO text and alt text, and URL redirects;
  - blog posts you approve, created hidden, and publishing, hiding again or
    deleting one only when you click to;
  - links you choose to fix in the text of products, collections, pages and
    blog posts.
- Change History: Each change XSeo writes to your store is recorded with the
  values before and after it (for a description or a fixed link, the full
  previous text; for a blog post XSeo created, its text; for your theme's
  robots.txt template, the whole file), when it was made, and whether a
  template, AI, an import or you made it. Redirects XSeo creates, edits or
  deletes are recorded with what they replaced. Undo uses this history.
- AI Processing (Google Gemini): AI is used only where you choose it (alt
  text, SEO titles and meta descriptions, product categories, translations,
  description drafts and blog post drafts): from the app, or from autopilot
  steps you turn on (alt text and SEO text when you set them to AI; new
  products' categories and translations always use AI). Only the following
  is sent to Google's Gemini API (paid tier):
  - Alt text: a 768-pixel copy of the image, and the product's title, brand,
    type, variant color and collection (or the file name when the image is on
    no product).
  - SEO titles and meta descriptions: your store name and the item's title,
    brand, type, category, options and the first 600 characters of its
    description. For a collection, the titles of its first 5 products are
    added. For a page or blog post, its title, text, blog and author name are
    sent.
  - Product categories: the product's title, type, brand, up to 10 tags and
    the first 300 characters of its description.
  - Translations: the text to translate (SEO title, meta description or alt
    text) and the target language, or the item's details as for SEO text.
  - Description drafts: for a product, its title, brand, type, category,
    options, specification fields and current description. For a collection,
    the titles of its first 20 products, their types and brands, and its
    current description.
  - Blog post drafts: for each product the post is about (the products you
    pick, up to 8, or up to 12 active products of the collection you pick),
    its title, brand, type, category, options, specification fields and the
    first 1,200 characters of its description; the collection's title and the
    first 1,500 characters of its description; and any notes you type.
  We never send prices, customer or order data, or Search Console data. Under
  Google's terms for paid use, Google does not use these prompts or responses
  to improve its products; it logs them for a limited period only to detect
  abuse, for safety and security, and where the law requires. For large jobs,
  XSeo may send these requests through Google's Batch API under the same
  terms; the requests and answers are then held in XSeo's database and at
  Google only until the job ends (usually minutes, at most two days, even if
  the job is paused), and deleted. If Google doesn't confirm a deletion, XSeo
  asks again every six hours until it does. In the rare case that the
  connection drops just as Google accepts a job, XSeo finds the job in
  Google's list and deletes it within 54 hours. AI requests are sent from a Cloudflare server in eastern North
  America (see International Data Transfers). Previews ("samples"),
  description drafts and blog post drafts are generated when you ask and are
  not stored by XSeo; a blog post draft you are editing stays in your browser
  until you create or discard it.
  Only text written to your store (directly, or after you approve it) is kept,
  in the change history.
- Store Owner Email: We use the store contact email and owner name that
  Shopify provides to send you two kinds of email, in the language you use in
  XSeo's admin (which we store for this):
  - Autopilot emails, when you turn on any part of autopilot: a daily summary
    of what autopilot did (images optimized, with file names and sizes; alt
    text written; new products given SEO text, a category or translations;
    new blog posts given SEO text) and of pages that became slower at the
    monthly speed check, and an alert when a large import is waiting for your
    decision.
  - A monthly report, on unless you turn it off: counts of what XSeo wrote
    and found in the month (such as new 404 pages, broken links and site
    audit issues), and Google's numbers for your store: Chrome UX Report and
    PageSpeed results and, if you connected Search Console, its clicks,
    impressions and before/after comparisons. You can also send yourself the
    current month's report from Settings.
  Every email has a one-click unsubscribe, and you can turn each kind off in
  the app's Settings. We keep a record of each email sent (address, time,
  delivery result) until your shop data is deleted (see Data Retention).
- Speed Measurements: To show before/after page speed we request measurements of
  your public storefront URLs (your home page, one product page and one
  collection page) from Google's PageSpeed Insights service and store the
  results. This happens once when you install the app, after an optimization
  run (at most once a day), whenever you ask for a new check, and
  automatically about once a month. The monthly check tells you, in the app
  and in the daily email if you receive it, which pages became slower. Only
  the page addresses are sent to Google.
- Real-Visitor Speed Data (Chrome UX Report): Once a week we ask Google's
  Chrome UX Report for your store's public speed data, sending your
  storefront's address and the three measured pages' addresses. Google answers
  with figures aggregated over many Chrome users over 28 days: typical loading,
  responsiveness and layout-stability times, the share of good, average and
  poor visits, and a weekly trend. They contain no information about
  individual visitors. No Google sign-in is involved.
- Google Search Console (optional): If you connect Google Search Console, XSeo
  asks Google for read-only access to Search Console (webmasters.readonly) and
  reads only a Search Console property that matches your store's primary
  domain. XSeo stores a Google refresh token, encrypted (AES-256-GCM), the
  property it reads, and these numbers for your store:
  - daily clicks, impressions and average position for the site (Google
    Search and Google Images), for your top pages and for the pages XSeo
    changed;
  - your top 50 search queries of the last 28 days, for Google Search and for
    Google Images;
  - the searches you choose to track (up to 25), with their daily clicks,
    impressions and average position and the pages Google showed for them;
    and, for the last 28 days, the searches and pages XSeo points out as worth
    a look (searches where your pages show at positions 8 to 20, pages with few
    clicks for their position, Google Images searches);
  - for your active products, and for any page you check: whether Google has
    the page in its index and, if not, the reason Google gives (for example
    "Crawled, currently not indexed"), when Google last crawled it, and the
    address Google chose as the main version;
  - the before/after comparisons computed from these numbers.
  Search queries are aggregated by Google and contain no information about
  individual visitors. If you also choose "Let XSeo submit" for your image
  sitemap, XSeo asks for Search Console's broader access (webmasters) and uses
  it only to submit that sitemap. XSeo keeps up to 16 months of these numbers,
  the period Search Console itself keeps. Disconnecting in XSeo revokes XSeo's
  access at Google and deletes the token and the numbers. Uninstalling XSeo
  does the same, and a shop data erasure request (shop/redact) deletes
  anything left. If you remove XSeo's access in your Google Account instead,
  XSeo can read nothing more and asks you to connect again; what it already
  stored stays until you disconnect in XSeo or uninstall, and never longer than
  16 months. XSeo uses this data only to show it to you (in the app and in the
  monthly report email), to compare pages before and after XSeo's changes, to
  point out pages hidden from search engines that still get visits from
  search, to tell you which of your pages are on Google and why others aren't,
  and to show how the searches you track move, and which searches and pages
  may be worth a look. It is not sent to AI models, shared or sold. XSeo's use
  and transfer of information received from Google APIs adheres to the Google
  API Services User Data Policy
  (https://developers.google.com/terms/api-services-user-data-policy),
  including the Limited Use requirements.
- Visits and Sales from AI Assistants (optional; not yet available: XSeo
  offers it only once Shopify approves the access it needs): If you allow XSeo to read
  your store's reports (Shopify's "read reports" permission), XSeo reads your
  store's own Shopify analytics once a day, using Shopify's ShopifyQL. For the
  last 90 days, XSeo reads and stores:
  - totals per day: the number of visits to your online store, the number of
    orders and your total sales;
  - the same totals for visits and orders whose referring website was an AI
    assistant, such as ChatGPT, Perplexity, Microsoft Copilot, Google Gemini or
    Claude, grouped by assistant. XSeo works these out from the referring
    website's domain, or a link tag the assistant adds;
  - the names of up to 10 other AI assistant websites, with their visit counts;
  - the orders and sales Shopify reports as placed with an AI assistant's help,
    per assistant;
  - your store's currency and time zone.
  These are totals only. XSeo does not read or store any customer's name,
  email address, phone number, address or ID, any order's details, or anything
  about an individual visitor. Shopify treats access to its analytics as
  access to protected customer data, because its reports can include customer
  details. XSeo's queries never ask for them. Each daily read replaces the
  previous one. XSeo uses this data only to show it to you on the Results page
  and on Home, next to the dates of XSeo's own changes. It is not sent to AI
  models, shared or sold. You can stop at any time with "Stop reading reports"
  on the Results page. XSeo then gives the permission back to Shopify and
  deletes these numbers.
- Structured Data and Image Sitemap: If you turn on XSeo's theme app embed
  ("XSeo structured data"), your storefront pages include structured data
  (JSON-LD) that XSeo prepares from:
  - your organization name, logo and social profile links, as you enter them;
  - your shop's location, if you add it (off by default): its kind, name,
    address, phone number, web page, opening hours and map coordinates, as
    you enter them or fill them from your store's address in Shopify, shown
    on your home page;
  - your store's return policy and fixed shipping rates, read from Shopify;
  - breadcrumbs, and product ratings from your review app's data.
  To decide what to add, XSeo checks a few of your public pages each week
  (your home page, up to 3 products, a collection and a blog post). It also
  reads whether the embed is on in your published theme's settings; the
  embed never changes theme files. The image sitemap at /apps/xseo/sitemap.xml lists your
  published products' page addresses, image addresses and last-updated dates.
  XSeo caches it in its cloud storage, refreshes it about once a day while
  search engines request it, and deletes it after 30 days without requests.
  All of this is public information about your store.
- AI Crawler Rules: If you choose on the AI crawlers page to block crawlers
  that collect pages to train AI models, and apply your choice, XSeo writes it
  into your published theme's robots.txt template (templates/robots.txt.liquid),
  between two lines that mark the rules as XSeo's. It changes nothing else in
  your theme, and it never blocks search engines, AI search or shopping
  assistants. Before writing, XSeo reads your store's public /robots.txt and
  shows you the file and the result; afterwards it reads /robots.txt again to
  confirm the change. The file's previous content is kept in the change
  history, so you can undo the change. Shopify ends XSeo's access when you
  uninstall it, so XSeo can't take its rules out afterwards: they stay in your
  theme and keep working on their own. To remove them, use "Remove XSeo's
  rules" before you uninstall, or delete the marked lines in your theme's code.
- Storefront Requests: XSeo serves a few addresses on your storefront through
  Shopify's app proxy (/apps/xseo/...): the image sitemap, the IndexNow key
  file and the 404 monitor's reports. Shopify forwards each of these requests
  to XSeo. It adds your shop's address, a timestamp, a signature and, when the
  visitor is logged in to a customer account, that customer's ID, and it
  passes the visitor's IP address and browser details along in the request
  headers. This is why Shopify's install screen lists "Device and activity
  data" for XSeo. XSeo checks Shopify's signature and then uses only your
  shop's address. It does not store the customer ID, the IP address or the
  browser details, and it removes the customer ID from its request logs. A
  request without a valid Shopify signature is rate-limited by the IP address
  it comes from; that address is used only for the count.
- 404 Monitor: When XSeo's theme app embed is on and a visitor reaches a page
  that doesn't exist (a 404 page), the visitor's browser reports two things to
  XSeo: the page's path, without any query string, and the host name of the
  site that linked to it (for example www.google.com, never the full linking
  address). The report is sent without cookies, so Shopify adds no customer
  ID to it. For each path, XSeo records the number of visits, the first and
  last visit time and up to 5 linking host names. It keeps up to 2,000 paths
  per store, and a path not seen for 90 days is deleted. Nothing about the
  visitor is recorded. The monitor is on by default; turning it off on the
  Links page (Missing pages) stops the recording. XSeo uses the log only to suggest
  redirects and broken-link fixes, for the site audit, and to count new 404
  pages in the monthly report.
- Redirect Suggestions: To suggest where an old address should point, XSeo
  keeps a list of your live products' and collections' handles (web
  addresses), titles and first collection. Shopify's product and collection
  update and delete notifications keep it current (they carry the item's ID,
  handle, title, status and update time). XSeo proposes redirects for deleted
  products and collections. It creates them automatically only if you turn
  that on.
- IndexNow (optional, off by default): If you turn it on, XSeo creates a key
  file at /apps/xseo/indexnow/<key>.txt and a redirect to it from /<key>.txt
  in your store. It then sends the public addresses of products and
  collections that were updated, deleted or changed by XSeo to
  api.indexnow.org, which shares them with the search engines that take part
  in IndexNow (such as Microsoft Bing). Each address is sent at most once a
  day. Google does not use IndexNow. Turning it off deletes the redirect.
- Store Checks: The site audit, the broken internal link check and "what AI
  agents see" read your store content through Shopify. "What AI agents see"
  asks your store's own Shopify Catalog (the interface AI shopping agents use)
  about a product, naming XSeo through a public profile file. The AI crawler
  check reads your storefront's public robots.txt, llms.txt and agents.md
  files. These results are shown to you and not stored, with three
  exceptions:
  - the broken-link report, kept until the next check replaces it (it can
    include Search Console clicks and impressions for pages hidden from search
    engines, and the linking host names the 404 monitor recorded for a broken
    link's address);
  - the storefront check's findings;
  - the site audit's history: the number of open issues per audit section per
    day, and the latest count of each check, with no content.
- Shopify Sidekick: If you ask Sidekick, Shopify's assistant in your Shopify
  admin, about your store's SEO, Sidekick can ask XSeo. XSeo answers with what
  you would see in the app for that question: titles and SEO text of your
  products, collections, pages and blog posts, counts from XSeo's checks, the
  paths of missing pages and broken links with XSeo's suggestions, your
  redirects, and the changes XSeo made, with their dates. XSeo sends no
  information about your customers. Shopify's own terms govern what Sidekick
  does with an answer. Sidekick can also open an XSeo page for you: a fix to
  review, or a support request to send. It may fill in text it wrote, or your
  request in your words. Nothing is written to your store or sent to us until
  you click Apply or Send. XSeo stores nothing new for this. Each question
  reads data XSeo already keeps, described above.
- Usage Counts: To apply XSeo's fair use, we record which items XSeo writes
  to each month (images, products, collections, pages and blog posts), by
  their Shopify ID. To apply AI's monthly limits (up to three AI generations
  per item and kind of text a month, and AI for up to 100 items a month, or
  the number we set for your store when you ask for more), we also record
  which items AI wrote, drafted or previewed text for, by kind of text and
  month, and how many blog post drafts AI wrote each month. These counts hold
  no text and are deleted after the month ends, or when Shopify sends the shop
  redaction request after you uninstall. A number we set for your store is
  kept with your store's record until then.
- Team Notifications: The team that operates XSeo receives notifications in a
  private Telegram chat, which it also uses for its other Shopify apps. When
  you install the app, the chat receives your shop domain, primary domain,
  Shopify plan, whether it is a development store, country, and the store
  owner's name and contact email. It is also notified when a paid subscription
  starts (shop domain, plan, price and any discount code), when a refund is due
  after an uninstall (shop domain, plan, price and refund amount), and when a
  technical problem affects a shop (shop domain and the technical details).
- Feedback: If you send us feedback, your message, any rating and your shop
  domain may be forwarded to the same Telegram chat. We do not store it
  anywhere else.
- Support Requests: If you contact support from the app (Home's Help card,
  the Help page, "Ask for more AI", or a request Sidekick opens for you), we
  store your request in our database so that you can read our answers in
  XSeo: the topic you choose, your messages and our replies, the reply
  address you give (filled in with your store's email; we use it only if we
  need to reach you outside the app), the language you use XSeo in, and, to
  help us answer, your XSeo plan, Shopify plan and install date when you
  wrote. Each new request and each of your replies is also sent to the
  team's Telegram chat (shop domain, plan, topic, language, reply address
  and message). Please don't include your customers' personal information in
  a request.
- App Configuration: Admin preferences (such as setup progress) are stored in
  Shopify as a metafield on your shop. The structured data XSeo prepares is
  stored in Shopify as a metafield of the app's installation, which Shopify
  removes when you uninstall. Optimization, autopilot, email, search
  appearance, storefront, redirect and IndexNow settings are stored in our
  database.

We use this data exclusively to operate the app, provide support, and improve
the service. We do not use it for advertising and we do not build profiles of
your customers.

3. SHOPIFY DATA ACCESS

The app requests these Shopify permission scopes:
- reading and writing products: product media, alt text, SEO text, URL
  handles, categories, barcodes and descriptions;
- reading and writing files: optimized images and the alt text of images in
  Files;
- writing online store pages: SEO text and search-engine visibility of pages
  and blog posts, blog posts you approve (created hidden; published, hidden
  again or deleted only when you click to), links you fix in their text, and
  reading them for the broken-link check;
- writing online store navigation: URL redirects;
- reading locales and writing translations (optional: asked for only when you
  translate, or turn on translations of new products in autopilot):
  translating SEO text and alt text into your store's published languages;
- reading reports (optional, not yet available: asked for only when you turn
  on visits from AI assistants on the Results page): your store's Shopify analytics, read as
  totals per day (see "Visits and Sales from AI Assistants" in section 2);
- reading themes: whether XSeo's app embed is on in your published theme (read
  only);
- writing themes (optional: asked for only when you apply AI crawler rules):
  the AI crawler rules in your published theme's robots.txt template, and
  nothing else in your theme;
- reading legal policies and shipping: your return policy and shipping rates
  for structured data;
- writing the app proxy: the storefront addresses under /apps/xseo.

We do not request access to your customers or orders. Shopify classes the
optional "read reports" permission as protected customer data access, because
its analytics can include customer details. XSeo reads only store-wide totals
with it, never a customer or an order. Shopify's install
screen also lists "Device and activity data" for XSeo because of the app
proxy; see "Storefront Requests" in section 2. We access your store's data to
perform actions you start in the app, actions you enabled (such as automatic
optimization of new images or SEO text for new products), and these automatic
tasks:
- Backup check: once you have optimized an image, a daily check adds a
  temporary test image of XSeo's own to your Files, optimizes and restores it,
  and deletes it. Your own images are not changed by it.
- Speed measurement: each speed measurement (see "Speed Measurements" in
  section 2), the first of which runs when you install the app, reads your
  product and collection list (up to 50 of each) to choose the pages it
  measures.
- Storefront check: once a week (daily while your store is password-protected
  or a check failed), reads a few of your public pages, your return and
  shipping settings and your published theme's settings, and updates the
  structured data.
- Image sitemap: rebuilt from your published products about once a day while
  search engines request it.
- Product and collection notifications: keep the redirect suggestions (and
  IndexNow, if on) current.
- Search Console (if connected): reads new numbers about once a day (every
  hour while it imports your history), reads your product list to find the
  pages XSeo changed, and checks up to 600 of your active products a day with
  Google's URL Inspection.
- Visits from AI assistants (if allowed): reads your Shopify analytics once a
  day (again a few hours later if a read fails).

Support access: to investigate a problem, our support team can open XSeo for
your shop in the app's own interface, using the app's access to your store.
These sessions expire after 2 hours and cannot change or cancel your plan, and
every change made in them is recorded in our audit log (see Data Retention).

4. DATA SECURITY AND RETENTION

- Security Measures: We protect data with industry-standard practices,
  including TLS encryption for data in transit and encryption at rest. Access
  is limited to authorized personnel. Google Search Console refresh tokens are
  additionally encrypted with AES-256-GCM before they are stored, and are never
  written to logs.

- Data Retention:
  - Shop Records & Access Tokens: Your shop record (shop profile and install
    details) and access tokens are retained while the app is installed and
    deleted after you uninstall the app, when Shopify sends the shop redaction
    request.
  - Original Image Backups and Optimization History: Original images are kept
    for 60 days so you can restore them, then deleted. If you uninstall the app,
    they are deleted together with the optimization history when Shopify sends
    the shop redaction request (48 hours after uninstall), so a later reinstall
    can no longer restore them.
  - Change History and Redirect Log: The record of what XSeo wrote (alt text,
    SEO text, URL handles, search-engine visibility, categories, barcodes,
    translations, descriptions, blog posts and link fixes, with the values
    they replaced) and of the redirects XSeo created, changed or deleted is
    kept while the app is installed. It is deleted when Shopify sends the shop
    redaction request (48 hours after uninstall). The changes themselves,
    including redirects and blog posts, stay in your store: they are your
    content.
  - AI Usage Counts: Which items AI wrote, drafted or previewed text for this
    month, by kind of text, with no text. Deleted after the month ends, and
    when Shopify sends the shop redaction request.
  - Batch AI Requests and Answers: Held only until the job ends, at most two
    days, then deleted from XSeo's database; XSeo asks Google to delete its
    copy at the same time (see "AI Processing" above).
  - Google Search Console Data: Up to 16 months. It is deleted, and XSeo's
    Google access revoked, when you disconnect or uninstall, and again when
    Shopify sends the shop redaction request.
  - Visits and Sales from AI Assistants (not yet available): The last 90
    days, as daily totals, replaced by each daily read. Deleted when you stop it in XSeo or remove the
    permission, when you uninstall (and again when Shopify sends the shop
    redaction request), and if no daily read has succeeded for 14 days.
  - Real-Visitor Speed Data: Kept for 400 days; deleted when you uninstall.
  - 404 Monitor: A path not seen for 90 days is deleted, and at most 2,000
    paths are kept. The log is deleted when you uninstall.
  - Storefront Data: Kept while the app is installed and deleted when you
    uninstall (at the latest when Shopify sends the shop redaction request).
    This covers:
    - your structured data settings and the storefront check's findings;
    - the image sitemap, which is also deleted after 30 days without requests;
    - the list of product and collection handles;
    - deleted-product suggestions;
    - IndexNow's key, its queue (addresses already sent are deleted after 30
      days) and a log of its last 20 submissions;
    - the broken-link report.
    Shopify removes XSeo's theme app embed and its metafield with the app.
  - Site Audit History: Issue counts only, kept for 16 months. They are kept
    through an uninstall, so a reinstall within 48 hours keeps the trend, and
    deleted when Shopify sends the shop redaction request.
  - AI Previews, Drafts and Live Checks: AI previews, description and blog
    post drafts, "what AI agents see" and the AI crawler check's results are
    not stored by XSeo.
  - Email Records: The record of the emails XSeo sent (autopilot emails and
    monthly reports) and your email settings are deleted together with your
    shop data when Shopify sends the shop redaction request.
  - Speed Measurements: Kept for up to 400 days so before/after comparisons can
    be traced to Google's measurement; your first measurement is kept while the
    app is installed. All of them are deleted together with your shop data when
    Shopify sends the shop redaction request.
  - Usage and Billing Records: The Shopify IDs of the items counted in each
    billing period, subscription, discount and refund records, the install,
    uninstall and charge events Shopify reports to us as the app's developer
    (which can include the reason you give when uninstalling), and the record
    of your shop's one-time free allowance are retained as required for
    billing, accounting and abuse prevention. The allowance record is kept
    after you uninstall, so the free allowance is granted once per store.
  - Team Notifications and Feedback: Kept in the team's Telegram chat history.
    They are not deleted automatically when you uninstall; ask us and we will
    delete the ones about your shop.
  - Operational & Webhook Logs: Retained for up to 90 days for reliability and
    abuse prevention. This includes our team's audit log of support actions
    taken on a shop. Our request logs never include a shopper's customer ID.
  - Support Requests: Kept while a request is open. A request we close is
    deleted 12 months after it was closed; replying before then reopens it.
    All of your shop's requests are deleted when Shopify sends the shop
    redaction request (48 hours after uninstall). Copies sent to the team's
    Telegram chat are kept as described under "Team Notifications and
    Feedback".
  - Support Communications by Email: Retained for up to 2 years.

We honor Shopify's mandatory GDPR webhooks (shop and customer data requests,
and shop redaction).

5. INFORMATION SHARING

We do not sell your data. We only share information with:
- Essential Service Providers:
  - Cloudflare: hosting, database, file storage (image backups, speed
    measurements and the image sitemap), image processing, email delivery
    (Cloudflare Email Service, for the autopilot emails and the monthly
    report), and the server that relays AI requests to Google.
  - Google: PageSpeed Insights and the Chrome UX Report (speed measurements and
    real-visitor speed data; page addresses only), the Gemini API (AI text,
    only when you use it), and the Search Console API (only when you connect
    it).
  - Shopify: XSeo runs on Shopify's platform; your store's content, its
    translations, redirects and XSeo's structured data are stored in your
    store. When you ask Shopify's Sidekick about your store, XSeo's answers
    go to Sidekick (see "Shopify Sidekick" in section 2).
  - Telegram: delivery of the team notifications, feedback and support
    requests described in section 2.
- At Your Request: if you turn on IndexNow, the public addresses described in
  section 2 are sent to api.indexnow.org and shared with the search engines
  that take part in IndexNow.
- Legal Obligations: Where required by law or to protect our rights and the
  safety of others.

6. YOUR RIGHTS AND RESPONSIBILITIES

- Merchant Responsibilities: You are responsible for complying with privacy
  laws applicable to your store and for the content of the images you ask us
  to process.
- Your Rights: You may request access to, correction of, or deletion of your
  information. To exercise these rights, contact us using the details below.

7. OTHER IMPORTANT INFORMATION

- International Data Transfers: Our service providers process data on their
  global infrastructure, which may be outside your country. AI requests are
  sent to Google from a Cloudflare server placed in eastern North America (if
  that server is unavailable, from the Cloudflare data centre handling the
  request), and Google may process or briefly cache them in any country where
  it has facilities. XSeo is run from Vietnam: the team reads the notifications
  described in section 2, and the emails you send us, there. We use
  appropriate legal safeguards for any international data transfers.
- Children's Privacy: Our service is directed at merchants and is not intended
  for children.
- Policy Updates: We will notify merchants of material changes to this policy
  through the app or by other reasonable means.

8. CONTACT US

XSeo is provided by B2B Gold, Ho Chi Minh City, Vietnam. If you have any
questions about this Privacy Policy, please contact us:
- Email: privacy@afixer.app
- Website: https://xseo.afixer.app/

END OF PRIVACY POLICY