AgentRank Privacy Policy

What AgentRank processes

AgentRank processes the Shopify shop domain, app installation and plan usage, and public product catalog information needed to provide the service. Product information can include Shopify product IDs, handles, titles, descriptions, images, publication status, categories, metafields, and AgentRank's analysis results. Optional features also store merchant-provided brand aliases, regional tracking choices, crawler audits, IndexNow submission logs, notification preferences, and a notification email address.

AgentRank does not request or store shopper profiles, orders, payment details, or customer personal information.

Product usage analytics

AgentRank uses Mixpanel for store-level product analytics. One Shopify store is one Mixpanel profile: the stable Shopify Shop GID is the profile and event identifier, and the permanent *.myshopify.com domain is the readable profile name. We send allowlisted lifecycle, successful feature-use, and operational events together with environment, deployment, plan, onboarding, and merchant/automation/system classifications.

We do not send Shopify staff identities, merchant or Google email addresses, notification delivery addresses, access tokens, customer data, raw product IDs or content, AI prompts or responses, or raw exceptions to Mixpanel. Mixpanel is disabled when it is not configured.

How the information is used

We use shop and product information to reconcile the public catalog, calculate AI visibility scores, recommend product metadata, run merchant-requested simulations, provide discovery feeds, measure plan usage, prevent duplicate syncs, and support the App.

Optional Google and email connections

If a merchant connects Google Analytics and Search Console, AgentRank requests read-only access to the selected properties using the analytics.readonly and webmasters.readonly scopes. This access is used solely to display the merchant's own traffic, session, and search-performance data back to them inside the AgentRank AI Traffic dashboard. We encrypt the OAuth access and refresh tokens at rest, fetch reporting data on demand, and do not copy shopper-level profiles into AgentRank. The merchant can disconnect Google at any time, which deletes the stored credentials.

AgentRank's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is never used for advertising, never sold or transferred to third parties except as necessary to provide or improve the AI Traffic feature at the merchant's request, and is not used by humans except with the merchant's consent, for security, or to comply with law.

If email delivery is enabled, AgentRank sends the configured recipient address and the notification or digest content to Resend for delivery. Email can be disabled while retaining the same notifications inside the App.

AI processing and service providers

Product content and category-level shopping prompts are sent to Google Gemini to generate analyses and visibility simulations. Google acts as an infrastructure provider for those requests. We also use contracted cloud database and hosting providers to store and serve App data. We do not sell merchant or product information. Google's Analytics and Search Console APIs and Resend are optional service providers used only when those integrations are enabled.

Security and storage

Shopify and Google OAuth credentials are encrypted before database storage. Data is stored in managed infrastructure with access controls and is transmitted over encrypted connections. No storage or transmission method can be guaranteed completely secure.

Retention, uninstall, and redaction

On uninstall, AgentRank immediately deletes catalog, analysis, simulation, sync, crawler, IndexNow, notification, Google integration, and merchant-setting data and clears the stored Shopify access token. We retain only the shop's plan and usage record for Shopify's required redaction window so an immediate reinstall does not reset quota. Shopify normally sends the shop-redaction request after 48 hours; on that request, the remaining shop and usage record is deleted.

Your choices and rights

Depending on your location, you may request access, correction, deletion, restriction, or export of information associated with your shop. You may uninstall the App at any time and may request earlier deletion of the retained usage record. AgentRank does not use this information for cross-context behavioral advertising.

Changes and contact

We may update this policy when our processing changes. The effective date above identifies the current version. For privacy questions or requests, email support@agentrank.cc.