Privacy Policy
This Privacy Policy describes how Alignment AI (“we”, “us”, or “our”) collects, uses, and protects information when you use the Alignment GEO Shopify application.
1. Information We Collect
1.1 Merchant Data (provided by you)
When you use Alignment GEO, you provide us with brand and store information that we store to power the app's features:
- Brand identity data — brand name, tagline, description, logo URL, contact email, phone number, address, and social media handles.
- Product and service data — product names, descriptions, prices, URLs, and category information.
- FAQ knowledge — question and answer pairs you write to educate AI platforms about your brand.
- Trust & Authority data — founding year, employee count, certifications, awards, and media mentions.
- Competitive positioning — your unique value proposition and competitive advantages.
- Imported reviews — if you use the Review Import feature, we store reviewer names, emails (optional), ratings, review text, and review dates from your uploaded CSV file.
All merchant-provided data is stored as Shopify metafields in your store (namespace: alignment_geo) and in our secure database.
1.2 Automatically Collected Data
The app automatically collects the following operational data:
- AI bot visit logs — when an AI platform (such as GPTBot, ClaudeBot, or PerplexityBot) visits your store's
llms.txtoragent.jsonendpoint, we log: the bot name, user-agent string (truncated to 512 characters), the endpoint accessed, and the timestamp. No visitor personal data is collected. - AI referral logs — when a human visitor arrives at your store from an AI platform (e.g., via a ChatGPT recommendation), our Theme Extension logs: the referring domain, the full referrer URL (truncated to 512 characters), and the landing page URL.
1.3 Shopify Account Data
During installation and authentication, Shopify provides us with:
- Your shop domain (e.g.,
yourstore.myshopify.com) - Your shop's public information (store name, URL, email address)
- An access token to make authorized API calls on your behalf
2. How We Use Your Information
- Power app features — We use merchant-provided data to generate your
llms.txtbrand profile,agent.jsondiscovery file, and structured data (JSON-LD schema markup) that AI platforms read. - AI Traffic Analytics — We use bot visit logs and referral logs to display analytics in your dashboard. Data appears once AI bots start visiting your store — new installs show zero data, which is expected and normal.
- App functionality — Access tokens are used solely to read and write Shopify metafields, manage your store's theme files (for robots.txt optimization), and read product data on your behalf.
- Service improvement — Aggregated, anonymized data may be used to improve the app. We never identify individual merchants in aggregate analysis.
3. Data Sharing and Disclosure
We do not sell, rent, or share your personal data or your customers' data with third parties for marketing purposes.
We may share data only in the following limited circumstances:
- Service providers — We use Railway (hosting), PostgreSQL database providers, and Cloudflare for infrastructure. These providers access data only as necessary to provide their services and are bound by confidentiality obligations.
- Legal requirements — We may disclose data if required by law, court order, or to protect the rights and safety of our users.
- Business transfer — In the event of a merger or acquisition, data may be transferred as a business asset. We will notify affected merchants before any such transfer.
4. Data Retention and Deletion
- Active install — Data is retained for the duration of your app subscription to power the app's features.
- On uninstall — When you uninstall Alignment GEO, we immediately delete your session tokens, AI visit logs, AI referral logs, and shop configuration data.
- 48-hour purge — Shopify sends us a
shop/redactwebhook 48 hours after uninstall. At that point we permanently delete all remaining data associated with your shop, including any imported reviews. - Customer data requests — If one of your customers submits a GDPR data request via Shopify, we respond by identifying any imported reviews associated with their email address.
- Customer data erasure — If one of your customers requests erasure of their data, we anonymize their name and email in any imported reviews (review text and ratings are retained as aggregate data to preserve review statistics).
5. Your Rights (GDPR / CCPA)
Depending on your location, you may have the following rights regarding your personal data:
- Right to access — Request a copy of the data we hold about your store.
- Right to rectification — Correct inaccurate data (edit directly in the app or contact us).
- Right to erasure — Uninstalling the app triggers full data deletion within 48 hours.
- Right to portability — All your brand data is available as JSON within the app.
- Right to object — You can stop data collection at any time by uninstalling the app.
To exercise these rights, contact us at contact@alignmenttech.ai.
6. Cookies and Tracking
Alignment GEO is a Shopify embedded app that runs inside your Shopify admin. We do not use third-party cookies or tracking pixels. The Theme Extension script we inject into your storefront tracks AI referral sessions using the document.referrer browser API — no cookies are set.
7. Security
We implement industry-standard security measures including:
- All data transmitted over HTTPS / TLS 1.2+
- Shopify webhook HMAC signature verification on all incoming webhooks
- Database access restricted to our application servers
- Access tokens stored encrypted and never logged
8. Children's Privacy
Alignment GEO is a business tool designed for Shopify merchants. We do not knowingly collect personal information from individuals under the age of 18.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify merchants of material changes by posting a notice in the app at least 14 days before changes take effect. Continued use of the app after the effective date constitutes acceptance of the updated policy.
10. Contact Us
For privacy questions, data requests, or concerns, contact us: