Privacy Policy — One Click AI SEO

Last updated: May 27, 2026

This Privacy Policy explains how One Click AI SEO (Soarware Labs Inc.) ("the App", "we", "us", or "our") collects, uses, and protects information when you install and use the App on your Shopify store.


1. Who we are

One Click AI SEO is a Shopify application that uses artificial intelligence to generate and optimize search-engine-optimization (SEO) content for your products, pages, and blog posts — including titles, descriptions, meta tags, search tags, and image alt text — plus a full technical SEO toolkit (audit, redirects, sitemaps, IndexNow, Search Console, schemas, internal linking, and more).

  • App name: One Click AI SEO
  • Contact email: soarwarelabs@gmail.com
  • Company / operator: Soarware Labs Inc. (incorporated in Canada)
  • Address: 561 Bayfield Street, Suite 1005, Barrie, ON L4M 4Z9, Canada
  • Website: https://soarwarelabs.com
  • LinkedIn: https://www.linkedin.com/company/soarware-labs-inc/

2. Information we collect

When you install and use the App, we may collect and process the following:

a) Store and account information

  • Your Shopify store domain (e.g. your-store.myshopify.com)
  • Store owner name, email, and locale (provided by Shopify during installation)
  • Access tokens issued by Shopify to operate the App on your behalf

b) Product and catalog data

  • Product titles, descriptions, tags, product type, vendor, and images
  • Existing SEO/meta fields for products, pages, and collections

We read this data to generate optimized SEO content, and we write the optimized content back to your store at your request.

c) App usage data

  • Which optimization actions you run and when
  • Counts and metadata of AI generations (for billing/quota enforcement and analytics)
  • Your in-app settings (brand voice, language, target keywords, preferences)

d) Order attribution data

When the Conversion Pixel theme block is enabled on your storefront, the App captures and stores the following on each paid order so we can credit revenue back to the AI-optimized page that earned it:

  • Landing path on your store (with marketing query parameters filtered to a UTM allowlist; arbitrary query strings are dropped server-side)
  • HTTP referrer hostname + path (query string stripped)
  • Visitor's user agent string (truncated)
  • UTM source / medium / campaign (truncated)
  • The corresponding Shopify order id, order name, total price and currency

We do not store the customer's name, email, address, payment details, IP address, or any other Shopify customer fields in our database. Attribution rows tie 1:1 to a Shopify order id; under GDPR they are treated as personal data because the natural person is re-identifiable through that order, which is why we honor the GDPR webhooks described in Section 8.

Lawful basis (GDPR Art. 6(1)(f)): legitimate interest of the merchant (the data controller) in measuring the effectiveness of their own SEO and marketing. Merchants serving EU/UK shoppers should integrate the pixel with Shopify's Customer Privacy API consent banner — the pixel honors the analytics-consent flag where present.

e) Optional integration forwarding (Klaviyo / Mailchimp)

If you connect a Klaviyo or Mailchimp account on the Integrations page, then whenever an attributed paid order fires we transmit (but do not store) the following directly to your own connected account:

  • The customer's email address (received from Shopify's orders/paid webhook). This is the only customer personal field we transit.
  • The attributed product handle, landing path, order name, total, currency, and a flag indicating whether the landing page was AI-optimized.

We act solely as a conduit — the email never lands in our database; it is passed straight to Klaviyo's or Mailchimp's API in a single request. The downstream controller for that data is you and the provider you connected; their privacy terms and your own privacy policy govern its handling there. We sign every transmission over HTTPS, time the request out at 5 seconds, and never log the email.

API keys you paste on the Integrations page are encrypted at rest with AES-256-GCM using a key held only by our application server and never returned to the browser.

You can disconnect a provider at any time from the Integrations page; disconnect immediately stops all future forwarding.

f) What we do not collect

  • We do not store your customers' personal data beyond what is described in (d) above.
  • We do not collect payment card details. Billing is handled entirely by Shopify.
  • Beyond the optional integration transit described in (e), no customer personal data leaves our systems.

3. How we use your information

We use the information we collect to:

  • Provide the App's core functionality (generate and apply SEO content)
  • Run automatic features you enable, such as scheduled meta rotation and keyword refresh
  • Enforce plan limits and usage quotas
  • Maintain, secure, troubleshoot, and improve the App
  • Communicate with you about support, service, and important changes

We do not sell your data.


4. AI processing and third-party sub-processors

To generate SEO content, the App sends relevant product data (such as titles, descriptions, and product attributes) to third-party AI providers, which may include:

  • Google (Gemini API)
  • OpenAI (GPT models)

These providers process the submitted content solely to return generated text to the App. We configure our use of these services for API/business use. We do not send your customers' personal data to these providers. Please refer to each provider's own privacy and data-usage terms:

  • Google AI / Gemini: https://ai.google.dev/terms
  • OpenAI: https://openai.com/policies/privacy-policy

4a. Merchant-enabled integrations (Klaviyo, Mailchimp)

These are optional integrations you enable on the Integrations page with credentials for your own Klaviyo / Mailchimp tenant. When enabled, our server transits the customer email and order metadata described in Section 2(e) to the destination you configured. The controller relationship for data at rest in Klaviyo or Mailchimp is between you and that provider — we are not the controller of that destination and do not retain a copy of the forwarded data.

If you enable these integrations, make sure your store's privacy policy lists Klaviyo / Mailchimp as a marketing sub-processor and that you respect each customer's marketing-consent flag at checkout.

  • Klaviyo, Inc. — https://www.klaviyo.com/legal/privacy
  • Intuit Mailchimp — https://www.intuit.com/privacy/statement/

Other infrastructure sub-processors may include our hosting and database providers, used to operate the App.


5. Data sharing

We share data only:

  • With the AI providers and infrastructure sub-processors described above, to operate the App
  • With Shopify, as required to function as a Shopify app
  • When required by law, regulation, legal process, or governmental request
  • To protect the rights, property, or safety of us, our users, or others

6. Data retention

  • We retain store, product-metadata, settings, and usage records for as long as the App is installed.
  • Order attribution records (landing path, referrer, UTM, user agent, order id and totals) are retained for up to 24 months from the order date and then purged by a scheduled job. You may request earlier deletion at any time.
  • When you uninstall the App, Shopify sends us a shop/redact request approximately 48 hours later, at which point we permanently delete the data we hold for your store (settings, usage records, managed-product records, optimization history, order attribution records, and job records).
  • You may request deletion of your data at any time by contacting us.

7. Data security

We take reasonable technical and organizational measures to protect your information, including encrypted transport (HTTPS), restricted access to stored data, and server-side handling of all credentials and API keys. No method of transmission or storage is 100% secure, but we work to protect your information using industry-standard practices.


8. Your rights

Depending on your jurisdiction (including under the GDPR, CCPA, and Canada's PIPEDA), you may have the right to:

  • Access the personal information we hold about you
  • Request correction or deletion of your information
  • Object to or restrict certain processing
  • Request a copy of your information in a portable format

To exercise any of these rights, contact us at the email above. We respond to requests in accordance with applicable law.

GDPR mandatory webhooks

As a Shopify app, we support Shopify's mandatory privacy webhooks:

  • customers/data_request — for any orders named in the request, we compile and surface the order attribution records (landing path, referrer, UTM, user agent, timestamps) we hold against those order ids so the merchant can forward them to the data subject within the 30-day statutory window.
  • customers/redact — for any orders listed in orderstoredact, we permanently delete the corresponding order attribution records.
  • shop/redact — we permanently delete all data we hold for the store, including any remaining order attribution records (cascade-deleted from the Shop row).

9. International data transfers

Your information may be processed in countries other than where you are located, including by our AI and infrastructure providers. Where required, we rely on appropriate safeguards for such transfers.


10. Children's privacy

The App is intended for use by businesses and is not directed to individuals under the age of 16. We do not knowingly collect personal information from children.


11. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above and, where appropriate, by notifying you within the App or by email.


12. Contact us

For any questions about this Privacy Policy or our data practices, contact:

Soarware Labs Inc. (operator of One Click AI SEO) Website: https://soarwarelabs.com Email: soarwarelabs@gmail.com Address: 561 Bayfield Street, Suite 1005, Barrie, ON L4M 4Z9, Canada LinkedIn: https://www.linkedin.com/company/soarware-labs-inc/