AEO Vision for Shopify — Privacy Policy

Last updated: September 27, 2026

AEO Vision for Shopify (the “App”) is published on the Shopify App Store by Lusca Tech Limited (“we”, “us”). It measures how AI assistants such as ChatGPT, Gemini, Perplexity, Google AI Mode and Google AI Overviews mention your store. This policy explains what the App collects from merchants who install it, how that data is used, who processes it and how it is deleted. Questions: enes.komecoglu@luscatech.co.uk.

What we collect

• Store details from Shopify: store name, domain, country, currency, language, the store’s contact email address, and the access token Shopify issues to the App.
• Your catalog and blog: product titles, product types, vendors and images, and the list of your blogs. The App reads these to describe your brand and to build product reports.
• What you create in the App: the questions (“prompts”) you track, your competitor list, your brand profile, generated articles, tasks, sitemap freshness checks and notification settings.
• Results the App produces: the answers AI assistants gave to your prompts, the sources they cited, the scores derived from them, and reports.
• Google Analytics and Search Console (optional): only if you connect your Google account (see below).

What we never collect

Customer data, orders, payments or any other personal data of your shoppers. The App only asks Shopify for permission to read products, read and write blog content, and read store languages. It never writes to your store except when you publish an article to your blog.

How we use it

Only to run the checks, reports and features you see in the App. Your prompts are sent to AI assistants to collect their answers. Your storefront’s public pages and your product information are sent to Google’s Gemini models to describe your brand and to generate prompts, articles, featured images and reports. We do not sell your data and do not use it for advertising.

Emails

The App sends a welcome email after setup, a weekly summary and visibility alerts to the notification address in Settings › Notifications. You can turn the weekly summary and the alerts off there at any time.

Google Analytics and Search Console

If you choose to connect your Google account, we store the access tokens Google issues and read, read-only, the sessions that AI assistants refer to your store (Google Analytics 4) and your Google search performance (Search Console). We never change anything in your Google account. Disconnecting deletes the tokens and revokes them at Google; uninstalling the App deletes them with the rest of your data.

This data is shown only to your store inside the App. It is not sent to any AI model, not shared with or sold to anyone, not used for advertising and not used to train AI or machine-learning models. AEO Vision’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Aggregated statistics

The “industry-wide” view in Citations › Insights shows, for all AEO Vision customers together, what share of AI citations go to a few public sources (Wikipedia, Reddit, YouTube, LinkedIn, Medium, TikTok). It contains totals only; no store, brand, prompt or answer can be identified from it.

Cookies

The App runs inside your Shopify admin and signs you in with Shopify’s session tokens; it sets no tracking or advertising cookies. While you connect a Google account, a short-lived security cookie (15 minutes) ties the Google sign-in to your browser.

Service providers

Each provider receives only what its task requires:

• Shopify — store data and the Admin API
• Cloudflare — hosting, database and file storage
• Google — Gemini AI models; Google Analytics and Search Console APIs if you connect them
• Oxylabs — collecting the answers AI assistants give to your prompts
• OpenAI and Perplexity — backup collection of ChatGPT and Perplexity answers
• Resend — sending the App’s emails
• DataForSEO — search results for Reddit reports (only if enabled)

Some providers process data outside your country under their standard data protection terms.

Retention and deletion

Uninstalling the App stops all checks immediately. Shopify sends us a data-deletion request 48 hours after you uninstall; we erase all of your store’s data at that point, and a safety job erases anything left after 30 days. You can also erase everything at any time from Settings › Data › “Delete brand data”, and download your data from Settings › Data.

Security

Data is stored on Cloudflare’s infrastructure and encrypted in transit and at rest. Access tokens are kept on the server and are never shown in the App.

Your rights

You can ask us to access, correct or delete the data we hold about your store by writing to enes.komecoglu@luscatech.co.uk. The App is meant for businesses and is not directed to children.

Changes

If this policy changes, we will update this page and the date above.

Contact

Lusca Tech Limited · enes.komecoglu@luscatech.co.uk