This policy explains what information SEO Node collects, why, and what we do with it. SEO Node is a Shopify app operated by Prome Solutions, LLC ("we", "us"). It applies to the SEO Node app and to this website.
If you have questions, email [email protected].
Who this policy is for
SEO Node is used by Shopify merchants ("you"). We act as a service provider (processor) for the store data we handle on your behalf, and as the controller for account and contact information about you as our customer. Shoppers who visit a merchant's store should read that merchant's privacy policy; SEO Node does not store personal data about them in its database, as explained below.
Information we collect through the app
Store data from Shopify. When you install SEO Node you grant it the Shopify permissions shown at install. We use them as follows:
| Permission | What we use it for |
|---|---|
| Read and write products | Product titles, descriptions, SEO titles and descriptions, handles (URLs), product images, image alt text, vendor, type, variants, prices, SKUs and barcodes, to scan, score and fix product SEO |
| Read and write content | Pages and blog posts: titles, body text, SEO fields and handles, and the FAQ data you publish |
| Read and write online store navigation | URL redirects (broken link fixes, URL changes and the redirect manager) |
| Read and write files | Image alt text, file names, compression, format conversion and restoring originals |
| Read themes | Checking whether the SEO Node app embed is switched on in your theme. We do not change theme files |
| Write app proxy | Serving your llms.txt file and receiving 404 reports at your-store.com/apps/seo-node/ |
| Read locales | Knowing your store's languages for the language check, AI writing language and 404 tracking |
We also receive basic shop details from Shopify: store name, domain, contact email, currency, time zone, primary language, whether the store is password protected and, if you switch on "Show contact info" for structured data, the store address and phone number. Shopify's sign-in also gives us the access token for your store.
Settings and results. Your app settings, scan results, scores, the history of every change the app makes (old and new values), job logs and usage counts for plan limits.
404 tracking. When a shopper lands on a missing page of your store, the app embed sends us the missing page's path and the address of the page they came from. For each missing path we store the path, how many times it was hit, when it was first and last seen, and the last 20 referring page addresses with their query strings removed. We also keep a daily count of 404 reports per store to enforce limits. We do not store IP addresses or any other information about the shopper in our database. To limit abuse, a one-way hash of the sender's IP address is kept briefly in memory and is never written to our database.
Hosting request logs. Requests to the app, including 404 reports and llms.txt requests that Shopify forwards from your storefront, pass through our hosting provider, DigitalOcean. Its platform logs may briefly contain technical request data such as IP addresses and the requested URL. Our own request log replaces the values of sensitive URL parameters (such as sign-in tokens and signatures) with "[redacted]". When a shopper is signed in to your store, Shopify adds the shopper's numeric customer ID to the requests it forwards, and that ID can appear in these logs. These logs are used only to run and secure the service and are kept for DigitalOcean's log retention period.
Google Search Console (optional). If you connect Google, we receive the Google account email you sign in with and an access token for Search Console and Site Verification. We store the token encrypted at rest (AES-256-GCM). We use it to add and verify your store, submit your sitemap, and read search performance data (queries, pages, clicks, impressions, click-through rate and position) for your store's property. You can disconnect at any time in Google Tools › Connections, which revokes the token and deletes the connection.
Speed tests. When you run a speed test, we send the public URLs of your homepage, a product page and a collection page to Google's PageSpeed Insights service and store the results.
Emails you ask for. If you turn on the weekly summary, request a PDF report or send a Concierge request, we store the email address you give us for that purpose.
Concierge requests. On the Concierge plan, the request type, description and contact email you submit.
Billing. Subscriptions are created and charged by Shopify. We receive your plan, billing interval, trial status and subscription status from Shopify. We never receive or store payment card details.
Information we do not collect
SEO Node does not request access to orders or customers, and it does not store personal data about your shoppers in its database. Hosting request logs, described above, may briefly contain technical data such as IP addresses. Shopify's customer data request and customer redact requests are answered accordingly.
How we use information
- To provide the app: scanning, scoring, writing and applying SEO changes you have switched on or requested, publishing structured data, llms.txt and FAQ schema, and showing reports.
- To send emails you asked for: weekly summaries, PDF reports and Concierge confirmations.
- To keep the service secure and working: rate limiting, request logs, error logs and job logs.
- To apply your plan and its limits.
- To answer support requests.
We do not sell your information, use it for advertising, or use your store content to train AI models.
AI processing
When AI writing is on, we send the data needed for the task to OpenRouter, an AI routing service, which passes it to the AI model provider selected for that task. Depending on the task this includes item titles, description excerpts, vendor, product type, price, target keyword, store name, image URLs, and for FAQ schema the text of your FAQ page. We record which task ran, the model, token counts, cost and whether it succeeded; we do not store the prompt text. If AI is unavailable, the app uses templates instead and labels the result.
Service providers
We use these providers to run SEO Node. Each receives only what it needs.
| Provider | Purpose | Data involved |
|---|---|---|
| Shopify | App platform, sign-in and billing | Store data, subscription data |
| DigitalOcean (App Platform and Managed PostgreSQL) | Hosting the app and its database | All app data described above, plus request logs |
| DigitalOcean Spaces | File storage for original image backups and PDF reports | Image files, PDF reports |
| OpenRouter and the AI model providers it routes to | Writing meta tags, alt text, keyword ideas and FAQ extraction | Task inputs described under AI processing |
| Google (Search Console API, Site Verification API, PageSpeed Insights API) | Search Console connection, verification, metrics and speed tests | Store domain and URLs, Search Console data, Google account email |
| Our email delivery provider | Sending email | Recipient email address and email content |
Our providers may process data in the United States and other countries. Where the law requires it, we rely on appropriate safeguards for international transfers.
How long we keep information
- While SEO Node is installed, we keep your app data so the app can work and show your history.
- Original image backups are kept for 120 days after compression, then deleted.
- PDF reports are kept for 30 days.
- Hosting request logs are kept only for our hosting provider's log retention period.
- When you uninstall, we stop processing your store and keep your data for 48 hours so a reinstall can pick up where you left off. After that, when Shopify sends its store deletion request, we delete all data linked to your store, including image backups and PDF reports.
- Changes the app wrote into your Shopify store (for example titles, alt text, URLs and redirects) are part of your store and remain there after uninstall. You can undo paid changes with Remove fixes before uninstalling.
Security
Data is sent over encrypted connections. Google tokens are encrypted at rest. Access to production systems is limited to the people who operate the service. Shopify webhooks are verified before they are processed. No system is perfectly secure; if we become aware of a breach affecting your data, we will notify you as the law requires.
Your choices and rights
- Switch any automation off at any time in the app.
- Disconnect Google at any time.
- Turn off the weekly email in Settings.
- Uninstall the app to stop all processing; your data is deleted as described above.
- Depending on where you live, you may have the right to access, correct, delete or export your personal information, or to object to or restrict its use. Email [email protected] and we will respond within the time the law requires. You can also complain to your local data protection authority.
Shoppers with requests about a store's data should contact that store; we will help the merchant respond.
This website
This website does not use advertising or analytics cookies and does not track you across sites. Our hosting provider processes standard technical data such as IP address and browser type to deliver pages and protect against abuse. If you email us, we use your email to reply.
Children
SEO Node is a business service for Shopify merchants and is not directed at children.
Changes to this policy
We will update this page when our practices change and change the "Last updated" date. For significant changes we will tell merchants in the app or by email.
Contact
Prome Solutions, LLC
[email protected]