Privacy Policy

AEO Ultimate · Operated by Tampa Web Technologies Inc · Effective October 6, 2026

This Privacy Policy explains what information the AEO Ultimate app (“AEO Ultimate,” “the app,” “we,” “us”) collects when you install it on your Shopify store, how we use it, and who we share it with. AEO Ultimate is operated by Tampa Web Technologies Inc.

The short version. We process your store’s product catalog and the credentials you give us so the app can enrich your products and sync listings. We do not collect your customers’ personal information. We use trusted third-party services (AI providers, Google, our hosting and storage vendors) to deliver the app, and we delete your data when you uninstall.

1. Information we collect

Store & authentication data

Your store domain (e.g. your-store.myshopify.com).
Shopify Admin API access tokens issued to the app so it can read and update your products and metafields. These are stored encrypted at rest with our storage provider and are used only to operate the app on your behalf.

Product catalog data

Product titles, descriptions, images, variants, pricing, inventory, and metafields. The app reads this to generate AI-extracted attributes, structured data (JSON-LD), and merchant-listing content, and writes results back to your store as metafields.

Configuration you provide

Settings and credentials you enter in the app — for example your Google Merchant Center account ID, author/reviewer profile details, your organization profile, and (optionally) your own AI provider API keys or your own Google OAuth client credentials. These are stored to operate the features you enable and are never displayed back to you in full.

Google account data you connect

Connecting Google is optional. If you connect, we store an OAuth token for your store only — each store’s Google authorization is kept separate. You can disconnect either service at any time from within the app, which deletes the stored token.

Google Merchant Center (read-only): we read your product listings and their status — price, availability, and any disapproval reasons — so the app can compare them against your Shopify catalog and report mismatches.
Google Search Console (read-only): we read your verified properties and your aggregated search performance data (query text, clicks, impressions, CTR, average position) so the app can identify purchase-intent queries and suggest content targeting them. This is aggregated search statistics, not information about individual people.

We access this data only to provide the features you enable. We do not sell it, and we do not use it for advertising.

Documents you add to the RAG Engine (Pro, optional)

Files you add to the RAG Engine are read in your browser; the files themselves never leave your computer. Only their extracted text, split into passages, is stored in our passage store (rag.aeoultimate.app), together with text from your store’s own product, collection and blog pages for comparison. The RAG Engine privacy policy covers this in full.

Using AEO Ultimate with Claude (Mid and Pro, optional)

The Claude connector is off until you turn it on under Settings → Use with Claude and create a connection key. When you connect it, the tools you or Claude use send the store data they read — for example product details, SEO fields, Search Console statistics, AI visibility results and passages from your RAG Engine documents — to your own Claude account at Anthropic, where Anthropic’s terms and privacy policy apply. If you connect through aeoultimate.app, our server there passes each request and its result between Claude and the app; it stores your account email and the connection key (encrypted), not the results. In the app we store a hash of the key (never the key itself), whether changes are allowed, and a history of the last 50 changes made through Claude with their before and after values so they can be undone. The connector cannot read orders or customers. Revoking the key or turning the connector off stops it at once.

What we do not collect

We do not collect, store, or process your customers’ (shoppers’) personal information — names, emails, addresses, or order details. The app operates on product and store-configuration data only.

2. How we use your information

To operate the app’s core features: enriching products, generating structured data and content, and auditing your listings against Google Merchant Center.
To authenticate with Shopify and other services you connect.
To maintain, troubleshoot, and improve the app.
To surface optimization insights from the Search Console data you connect.

3. External services & sub-processors

To deliver its features, AEO Ultimate relies on the third-party services below. Product content and configuration data may be transmitted to these providers strictly to perform the requested processing. We do not transmit shopper personal data to any of them.

Service	Purpose	Data shared
AI providers — Anthropic (Claude), OpenAI, Google (Gemini), and xAI (Grok); optionally Perplexity, Mistral, Meta and DeepSeek for AI visibility checks	Generating product attributes, structured data, and blog/marketing content, and asking AI assistants questions about your store	Product titles, descriptions, and related catalog text you ask the app to process. Only the providers you add a key for are ever contacted — the app holds no AI key of its own. Sent per-request; per these providers’ API terms, API inputs are not used to train their models.
Web search providers — Brave, Serper, or Google Programmable Search (optional, your key)	Finding manufacturer product pages and checking whether your descriptions appear elsewhere	Search queries built from your product and brand names. Only used if you add a search key.
Google — Merchant Center API & Search Console API	Auditing your product listings; reading your search performance data	Read-only: your Merchant Center listing data and your Search Console query statistics — only for the services you choose to connect.
Claude (Anthropic), through your own Claude account; optionally via aeoultimate.app (Tampa Web Technologies Inc)	The Claude connector, only when you turn it on and connect it	The store data each tool you use returns, sent to your Claude conversation; aeoultimate.app relays it without storing it.
AEO Ultimate RAG Engine — our passage store at rag.aeoultimate.app (Tampa Web Technologies Inc)	Searching your documents and comparing them with your store pages (Pro)	Text extracted from the documents you add, and text from your own product, collection and blog pages. Never the files themselves.
Vercel	Application hosting	Requests and operational data needed to run the app.
Upstash	Data storage (managed Redis)	Store tokens, settings, and cached processing results.

Each provider processes data under its own privacy policy and security commitments. We share only what a feature requires, and only when you use that feature.

4. Data retention & deletion

We retain your data only as long as the app is installed and you continue to use it.
When you uninstall the app, Shopify notifies us and we delete the data associated with your store — including Shopify access tokens and sessions, any Google authorization tokens, saved settings and credentials, and cached results — in line with Shopify’s mandatory data-erasure requirements.
You can also disconnect Google Merchant Center or Google Search Console at any time from within the app, which deletes that stored token immediately.
Because we do not store shopper personal data, there is no customer data for us to return or erase in response to customer data or redaction requests.

5. Google API Limited Use

AEO Ultimate’s use of information received from Google APIs — the Merchant Center API and the Search Console API — adheres to the Google API Services User Data Policy, including its Limited Use requirements. We use Google user data only to provide the user-facing features you enable, we do not transfer it except as necessary to operate those features, and we do not use it for advertising or any unrelated purpose. We do not allow humans to read this data except with your explicit permission, to resolve a support issue you have raised, or where required by law.

6. Security

We use industry-standard measures to protect your data, including encrypted transport (HTTPS), encrypted storage of credentials, and signed, verified webhook communication with Shopify. No method of transmission or storage is perfectly secure, but we work to protect your information and limit access to it.

7. Your rights

Depending on your location, you may have rights under laws such as the GDPR or CCPA/CPRA to access, correct, or delete your data, or to object to or restrict its processing. To exercise these rights, or for any privacy question, contact us at david@tampawebtech.com. You can also delete all data we hold for your store at any time by uninstalling the app.

8. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Effective” date above and, where appropriate, notify you through the app. Continued use of the app after an update constitutes acceptance of the revised policy.

9. Contact

Tampa Web Technologies Inc
8005 Tierra Verde Dr, Tampa, FL 33617
david@tampawebtech.com