Legal

Privacy Policy

Last updated 2026-10-18

This policy explains what Mr. AEO ("we", "us") collects on shopaeo.ai and in the Mr. AEO app, which works with Shopify, why we collect it, and what you can do about it. Mr. AEO is run by its founders in New York, NY, USA. Our company details will be listed here once it is registered. If anything here is unclear, email [email protected].

On this website

• Beta and report sign-ups. Your email address, your store's web address, whether you ticked the box for product news, the date, and the country your request came from. We use these to contact you about the beta or send the report you asked for. We only send product news if you ticked the box and then confirmed by clicking a link in one confirmation email. Every news email has an unsubscribe link.
• AI answer reports. To build a report you asked for, we send your store's web address and shopping questions about your product category to AI assistants (ChatGPT, Gemini, Perplexity and Claude) through each one's API, or through our data provider, DataForSEO. We don't send your email address.
• The free checker. We read the public pages of the store address you enter (its homepage, robots.txt, public product list or all-products page, the public data files for up to 20 products, one product page and its policy pages), the same way any visitor or search engine can. We keep the result for one day so repeat checks are fast. We don't ask for a login.
• Abuse protection. We use your IP address to limit how many checks and sign-ups one connection can make. These counters delete themselves after about a day, and we don't store your IP address with your sign-up.
• Cookies and analytics. We use Google Analytics to understand how people find and use this site. It records the pages you view, the page that referred you, your browser and device type, your approximate location and how you interact with the page, and it sets first-party cookies to tell repeat visits apart. For visitors in the European Economic Area, the United Kingdom and Switzerland, we don't load Google Analytics at all. We have turned off Google signals and ad personalization and we don't use analytics data for advertising. We don't send your email to Google Analytics, and we remove the store address you check from page addresses before they reach it. You can opt out with Google's browser add-on. We may also count visits with Cloudflare Web Analytics, which sets no cookies. Our fonts are served from our own site.

In the Mr. AEO app

When a store installs Mr. AEO, Shopify gives us access to the parts of the store the app needs. We use it to find problems, write suggested fixes and, only after you approve them, make the changes.

• Store content. Products, collections, pages, blog posts, images, image descriptions, redirects, theme settings (read only) and store policies.
• No customer or order data. The app doesn't request access to your customers' personal information or your orders.
• Your team. The names and emails of staff who use the app, so we can show who approved each change.
• AI drafting. To write suggested fixes and content ideas, we send the relevant product or page content, and, if you connected Google, the search queries and page traffic related to it, to Anthropic's Claude models through Anthropic's API. Anthropic processes it for us and doesn't use it to train its models.
• AI answer tracking. On Growth, and for the monthly sample on Pro, we send the shopping questions you choose and your store's name and web address to OpenAI, Google (Gemini), Perplexity and Anthropic, to see how their assistants answer. We don't send customer data.
• Tools you connect with your own API key. If you add your own Semrush or DataForSEO key, we send your store address and the related search questions to that provider so it can return results to you.

Google data

Connecting Google is optional. If you connect, we ask for read-only access to Google Search Console (clicks, impressions and search queries for your site's pages) and Google Analytics (landing page visits and revenue). We use this only to rank fixes by your real traffic, suggest content based on what people search for, and show before and after results inside the app. We never change anything in your Google accounts.

• We don't sell Google data, use it for advertising, or use it to train general AI models.
• We don't let people read it, except with your permission, to investigate a security problem, or when the law requires it.
• We share it only with the providers listed below, only to run these features for you.
• We store your Google connection tokens encrypted. When you disconnect Google, we revoke access and delete the Google data we stored. After uninstall, it is deleted with the rest of your store's data 48 hours later, and from our backups within 14 days.

Mr. AEO's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Who helps us run Mr. AEO

We use a small number of service providers, each only for the job listed: Cloudflare (website hosting, analytics and sign-up storage), Google (website analytics, and app data only if you connect it), Amazon Web Services (app hosting and storage), Anthropic (AI drafting and AI answer tracking), OpenAI, Google Gemini and Perplexity (AI answer tracking), DataForSEO (search and AI answer data), Shopify (app platform and billing), an email service (to send the emails you ask for) and our team chat tool (an internal alert when a store signs up, with the store address only, never your email). Our providers may store and process data in the United States and other countries.

We don't sell or share personal information as defined by the California Consumer Privacy Act, and we don't use it for cross-context behavioral advertising.

How long we keep it

• Beta and report sign-ups: until the beta ends, when we delete them, or sooner if you ask.
• Product news consent: until you unsubscribe.
• Checker results: one day.
• Website analytics: Google Analytics keeps visit data for the retention period set in our account, at most 14 months.
• App data: while the app is installed. We respond to Shopify's privacy requests. Shopify sends a store deletion request 48 hours after a store uninstalls, and we then delete that store's data. Our backups are overwritten within 14 days, so deleted data is gone from them after that. Because the app doesn't hold customer data, we answer customer data requests by confirming we have none.

Your choices and rights

You can ask us to show, correct or delete what we hold about you, or to stop emailing you, by writing to [email protected]. Depending on where you live (for example the EU, the UK or California) you may have further rights, and we honor these requests for everyone. We reply within 30 days.

Security

Data is encrypted in transit. Connection tokens are encrypted at rest, and access to our systems is limited to the people who run them.

Children

Mr. AEO is a business tool and isn't meant for anyone under 16.

Changes

If we change this policy in a way that matters, we'll update the date above and tell app users inside the app.