Privacy Policy

We collect information to provide and improve our services. The categories below describe what we collect and how we collect it.

• Account Information: When you sign up, we collect your name, email address, organization name, and authentication credentials. If you sign in with a third-party identity provider (e.g., Google), we receive your name, email, and profile picture from that provider.
• Billing Information: When you subscribe to a paid plan, our billing provider collects and processes your payment details (card number, billing address, tax ID). SnowSEO itself does not store full card numbers.
• Usage Data: We automatically collect information about how you interact with our services, including IP address, browser type, device information, operating system, referring pages, pages visited, features used, and time spent on the platform.
• User Content: Content you create or input into SnowSEO, such as keywords, target URLs, brand voice samples, prompts, draft articles, and published content.
• Integration Data: When you connect a third-party service (such as Shopify, WordPress, Framer, Google Search Console, or analytics tools), we collect the credentials, tokens, and content required to deliver the integration. See the dedicated section below for the Shopify integration specifically.
• Communications: When you contact our support team or respond to surveys, we keep a record of the conversation to help us improve.

We use the information we collect for the following purposes:

• To provide, maintain, and improve our services and develop new features.
• To process subscriptions, manage your account, and apply usage-based pricing.
• To publish content to your connected integrations on your behalf (for example, publishing an article to your Shopify blog or WordPress site).
• To generate SEO content via large language models on your behalf, using only the inputs and brand context you provide.
• To communicate with you about service updates, security alerts, and support requests.
• To send you newsletters and marketing communications related to SnowSEO (you can opt out at any time).
• To analyze aggregated usage patterns and improve product performance and reliability.
• To detect, investigate, and prevent fraudulent or abusive activity and to protect the security of our platform and our customers.
• To comply with legal obligations, enforce our Terms of Service, and protect our rights.

If you are located in the European Economic Area, the United Kingdom, or Switzerland, we rely on the following lawful bases to process your personal data:

• Contract: To provide the services you have subscribed to and to administer your account.
• Legitimate Interests: To operate, secure, and improve our services; to prevent fraud; and to communicate with you about SnowSEO.
• Consent: For optional cookies, marketing communications, and any processing that requires consent under applicable law. You can withdraw consent at any time.
• Legal Obligation: Where we must process data to comply with applicable laws, such as tax or accounting obligations.

We do not sell your personal data or User Content. We share data only with the categories of recipients listed below, and only to the extent necessary to operate SnowSEO.

• Sub-processors: Vetted third parties that process data on our behalf under written data processing agreements. See the named list below.
• Legal Requirements: We may disclose information if required to do so by law, subpoena, court order, or other valid legal process, or to protect the rights, safety, or property of SnowSEO, our users, or the public.
• Business Transfers: If SnowSEO is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any change in ownership or use of your personal data.

Current sub-processors and their roles:

• OpenRouter (USA): AI model routing and inference for content generation.
• Microsoft Azure OpenAI Service (USA / EU regions): AI model inference for content generation.
• Exa Labs (USA): Web search results used to ground AI-generated content in current information.
• Langfuse (EU): Observability and quality monitoring for AI prompts and responses.
• Cloudflare, Inc. (USA / global edge): Content delivery, edge compute, and R2 object storage for uploaded images and generated assets.
• Autumn (USA): Billing, subscription management, and metered usage tracking. Payment card data is processed by Autumn’s underlying payment processor and is not stored on SnowSEO servers.
• PostHog (USA / EU regions): Product analytics on aggregated usage to help us improve the dashboard.
• Sentry (USA / EU regions): Error monitoring and performance diagnostics.

We review our sub-processors regularly and update this list when we add or replace a vendor. If you have questions about a specific sub-processor or need a copy of our data processing agreement, contact us at [email protected].

When you install the SnowSEO app on your Shopify store, we collect only the data needed to publish content to your store on your behalf. This section describes exactly what we collect, why we collect it, and how long we keep it.

Data we collect from Shopify:

• Your shop's myshopify.com domain.
• An OAuth offline access token issued by Shopify, scoped to read_content and write_content only.
• The granted scopes string returned by Shopify during the OAuth flow.
• Blog and article metadata you choose to publish through SnowSEO (titles, content, tags, blog selection, publish status).

Data we do NOT collect from Shopify: SnowSEO does not collect, store, or process Shopify customer data, customer email addresses, orders, checkouts, payment information, fulfillment data, or any personally identifiable information about your shoppers. We do not request and are not granted any scopes that would allow access to that data.

Why we collect this data: The shop domain and access token are required to authenticate API requests to Shopify on your behalf. Blog and article metadata is required to create, schedule, and publish articles to the Shopify blog you select.

Retention and deletion:

• Uninstall: When you uninstall the SnowSEO app from your Shopify store, Shopify sends us an app/uninstalled webhook. We delete the OAuth session for your shop immediately and disconnect the integration in your SnowSEO account.
• SHOP_REDACT: Shopify sends a shop/redact webhook 48 hours after uninstall. On receipt, we delete any remaining shop-related session data from our systems.
• CUSTOMERS_DATA_REQUEST and CUSTOMERS_REDACT: SnowSEO does not store Shopify customer data, so these requests are no-ops by design. We acknowledge the webhook and take no further action because there is no customer data to return or delete.
• Published articles: Articles you have already published to your Shopify store remain on your Shopify store after you disconnect or uninstall. They are owned and controlled by you in Shopify; SnowSEO does not delete them on uninstall.

For information about how Shopify itself handles your data, see Shopify's Privacy Policy at https://www.shopify.com/legal/privacy.

We use large language models and related AI technologies to power SnowSEO's content generation, keyword research, and SEO analysis features. Inputs you provide (keywords, brand voice samples, prompts, URLs you submit for analysis) are sent to the AI sub-processors listed in the Data Sharing section above. We do not use your content to train third-party foundation models, and our agreements with AI providers prohibit them from using your content to train their models.

We use cookies and similar tracking technologies to keep you signed in, remember your preferences, analyze usage, and improve the service. You can control the use of cookies at the individual browser level. Disabling certain cookies may affect your ability to use parts of the service.

We retain personal data only for as long as is necessary for the purposes described in this policy, unless a longer retention period is required by law.

• Account data: Retained for the life of your account. When you delete your account, we delete or anonymize your personal data within 30 days, except where retention is required for legal, tax, accounting, or fraud-prevention purposes.
• Integration session tokens (Shopify, WordPress, Framer, etc.): Retained while the integration is connected. Deleted immediately on disconnect or uninstall.
• Generated content and project data: Retained for the life of your account or until you delete it from the SnowSEO dashboard, whichever comes first.
• Billing records: Retained for the period required by applicable tax and accounting laws (typically 7 years).
• Logs and analytics: Retained in identifiable form for up to 90 days and in aggregated form thereafter.
• Backups: Encrypted backups may persist for up to 30 days after deletion before they are overwritten in the normal backup rotation.

SnowSEO operates globally and our sub-processors are located in various jurisdictions, including the United States and the European Union. When we transfer personal data outside your country of residence, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (SCCs), the UK International Data Transfer Addendum, and equivalent mechanisms recognized under applicable law.

We implement administrative, technical, and physical safeguards designed to protect your information. These include encryption in transit (TLS), encryption at rest, role-based access controls, audit logging, automated dependency monitoring, and regular review of our security practices. While we work hard to protect your data, no method of transmission over the Internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security. If we become aware of a security incident that affects your personal data, we will notify you and relevant authorities in accordance with applicable law.

Depending on where you live, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Ask us to correct inaccurate or incomplete data.
• Erasure: Ask us to delete your personal data, subject to legal retention requirements.
• Restriction: Ask us to limit how we process your data in certain circumstances.
• Portability: Receive your data in a structured, machine-readable format.
• Objection: Object to processing based on our legitimate interests, including direct marketing.
• Withdraw consent: Where we rely on consent, you can withdraw it at any time without affecting prior processing.
• Lodge a complaint: If you are in the EEA, UK, or Switzerland, you have the right to lodge a complaint with your local data protection authority.

You can manage most account settings directly within the SnowSEO dashboard. To exercise any of the rights above, or if you have questions about how we handle your data, contact us at [email protected]. We will respond within the timeframes required by applicable law (typically within 30 days).

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what categories of personal information we collect and the right to opt out of the sale or sharing of personal information. SnowSEO does not sell personal information.

SnowSEO is a business tool intended for use by professionals and is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us at [email protected] and we will delete it.

We may update this Privacy Policy from time to time to reflect changes in our practices, our services, or applicable law. When we make material changes, we will notify you by email or through an in-app notice prior to the change taking effect. The "Last Updated" date at the top of this page always reflects the most recent revision.

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at [email protected]. For data protection or privacy-specific requests, please include "Privacy Request" in the subject line so we can route your message to the right team.